CVE-2026-27018

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-27018
Gotenberg is an API for converting document formats. Prior to version 8.29.0, the fix introduced for CVE-2024-21527 can be bypassed using mixed-case or uppercase URL schemes. This issue has been patched in version 8.29.0.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/gotenberg/gotenberg/commit/06b2b2e10c52b58135edbfe82e94d599eb0c5a11 Patch
https://github.com/gotenberg/gotenberg/commit/8625a4e899eb75e6fcf46d28394334c7fd79fff5 Patch
https://github.com/gotenberg/gotenberg/releases/tag/v8.29.0 Product Release Notes
https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r Exploit Mitigation Vendor Advisory
https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r Exploit Mitigation Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*
History

08 Apr 2026, 15:57

Type Values Removed Values Added
First Time Thecodingmachine
Thecodingmachine gotenberg
CPE cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
References () https://github.com/gotenberg/gotenberg/commit/06b2b2e10c52b58135edbfe82e94d599eb0c5a11 - () https://github.com/gotenberg/gotenberg/commit/06b2b2e10c52b58135edbfe82e94d599eb0c5a11 - Patch
References () https://github.com/gotenberg/gotenberg/commit/8625a4e899eb75e6fcf46d28394334c7fd79fff5 - () https://github.com/gotenberg/gotenberg/commit/8625a4e899eb75e6fcf46d28394334c7fd79fff5 - Patch
References () https://github.com/gotenberg/gotenberg/releases/tag/v8.29.0 - () https://github.com/gotenberg/gotenberg/releases/tag/v8.29.0 - Product, Release Notes
References () https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r - () https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r - Exploit, Mitigation, Vendor Advisory

31 Mar 2026, 15:16

Type Values Removed Values Added
Summary
  • (es) Gotenberg es una API para convertir formatos de documentos. Antes de la versión 8.29.0, la corrección introducida para CVE-2024-21527 puede ser eludida utilizando esquemas de URL en mayúsculas y minúsculas o en mayúsculas. Este problema ha sido parcheado en la versión 8.29.0.
References () https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r - () https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r -

30 Mar 2026, 21:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-30 21:17

Updated : 2026-04-29 01:00

NVD link : CVE-2026-27018

Mitre link : CVE-2026-27018

CVE.ORG link : CVE-2026-27018

JSON object : View

Products Affected

thecodingmachine

  • gotenberg
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-918

Server-Side Request Forgery (SSRF)