CVE-2026-119343 Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-119343?
CVE-2026-119343 is a medium-severity vulnerability in Stirling-Tools Stirling-PDF, published on 30 Oct 2026.
Official description
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.
Which versions are affected by CVE-2026-119343?
How do I fix CVE-2026-119343?
No fix has been published for CVE-2026-119343 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-119343 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-119343 exists.
Sources
Also known as GHSA-3x7x-943g-269w.