CVE-2026-113606
HIGH
7,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH
7,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: high
Availability: none
Description
AI Translation Available
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/<victimUserId>, list files, and run pipelines to read, modify, or destroy victims' files.
639
Authorization Bypass Through User-Controlled Key
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Gain Privileges Or Assume Identity
Applicable Platforms
All platforms may be affected
https://abraxaslabs.tech/research/stirling-pdf-3.2.0-leftovers
https://abraxaslabs.tech/research/stirling-storage-folder-idor
https://github.com/abraxas/stirling-storage-folder-idor
https://github.com/Stirling-Tools/Stirling-PDF/blob/v3.2.0/app/proprietary/src/…
https://github.com/Stirling-Tools/Stirling-PDF/blob/v3.2.0/app/proprietary/src/…
https://www.vulncheck.com/advisories/stirling-pdf-3.0.0-through-3.2.0-authoriza…