Live › vulnerability › CVE-2026-113606
Go to dashboardStirling-PDF 3.0.0 through 3.2.0 lets any logged-in user point a processing folder at the server storage directory of another user. An attacker can then list, read, modify or delete that victim's files through the processing pipeline.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that self-host Stirling-PDF in the affected version range and allow more than one user account on the same instance. Exposure depends on users being able to create processing folders, which the sources describe as available to any authenticated user. Single-user deployments or instances on a patched version can skip it.
No product ranges from the sources yet.
3.0.0 through 3.2.03.2.0; the fixed version is unknown from the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/<victimUserId>, list files, and run pipelines to read, modify, or destroy victims' files.
This page as .md · .json · in your agent: get_signal("CVE-2026-113606")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.