CVE-2026-126799 · Package
NO FIX YET · SEE WHAT TO DO
Gotenberg's private-IP deny list can be bypassed by appending an IPv6 zone identifier such as %25eth0 to a blocked address. An unauthenticated attacker can make the server fetch internal services and read the responses inside the returned PDF.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running Gotenberg 8.31.0 up to but not including 8.38.0 that accept URLs from users or untrusted sources in downloadFrom, webhook, or Chromium/LibreOffice inputs are exposed. Instances reachable only by trusted internal callers with fixed URLs are less exposed. Teams on 8.38.0 or later are not affected.
Not affected if no-user-supplied-urls, version-8.38.0-or-later
Who cares docker, gotenberg, self-hosted
gotenberg --version or the container image tag); versions 8.31.0 through 8.37.x are in the affected range.downloadFrom, webhook, or Chromium/LibreOffice URL inputs enabled.8.38.0 or later.Gotenberg 8.31.0 before 8.38.0 contains a server-side request forgery vulnerability in IsPublicIP() that allows unauthenticated attackers to bypass private-IP deny-list protections using IPv6 zone identifiers. Attackers can append a zone such as %25eth0 to the unspecified address or blocked IPv6 prefixes in downloadFrom, webhook, or Chromium/LibreOffice URLs to reach internal services and read responses in the returned PDF.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.