Vulnerabilities CVE-2026-55229

CVE-2026-55229

High

Open

TLP:CLEAR

Gotenberg: SSRF via LibreOffice document processing

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice to automatically retrieve external HTTP(S) resources and local file resources during document conversion, enabling blind SSRF and limited local file disclosure via linked image resource loading. This issue is fixed in version 8.34.0.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.36%

28.3th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Confidence: 90%
Published: Jul 10, 2026
Last Modified: Jul 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.