CVE-2026-108694 — ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter
ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc withou…
Published: 2026-10-11 · CVSS: 7.1 · CVSS 4.0
ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7