gotenberg存在命令执行漏洞(CVE-2026-42589)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-42589
• https://github.com/advisories/GHSA-rqgh-gxv4-6657
• https://vuldb.com/vuln/363919
• https://guide.sonatype.com/vulnerability/CVE-2026-42589
• https://cvefeed.io/vuln/detail/CVE-2026-42589
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESEXIFTOOL-16438315
• https://vuldb.com/zh/cve/CVE-2026-42589
• https://app.opencve.io/cve/?vendor=gotenberg

Related Vulnerabilities

• PoCCVE-2026-42596: Gotenberg < 8.31.0 - Server-Side Request Forgery
• PoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File Disclosure
• PoCCVE-2026-40280: Gotenberg <= 8.30.1 - Server Side Request Forgery
• PoCCVE-2026-42589: Gotenberg - Command Injection
• Gotenberg /forms/chromium/convert/url 服务器端请求伪造漏洞（CVE-2026-42595）
• Gotenberg /forms/chromium/convert/url 服务器端请求伪造漏洞（CVE-2026-40280）