CVE-2026-108694

6.5 MEDIUMpublic exploit available

Published 2026-10-11 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-73

Public exploit & PoC references

https://github.com/C4illin/ConvertX
https://github.com/C4illin/ConvertX/blob/710bc7c71712af04198a39f003e3ea1aa5168a31/src/converters/pandoc.ts#L123-L152
https://github.com/C4illin/ConvertX/issues/668

All references

https://github.com/C4illin/ConvertX
https://github.com/C4illin/ConvertX/blob/710bc7c71712af04198a39f003e3ea1aa5168a31/src/converters/pandoc.ts#L123-L152
https://github.com/C4illin/ConvertX/issues/668
https://www.vulncheck.com/advisories/convertx-through-0.19.0-arbitrary-file-read-via-pandoc-converter

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100637PoC
HIGHCVE-2026-100638PoC
UNSCOREDCVE-2026-101126
CRITICALCVE-2026-101148
MEDIUMCVE-2026-102141PoC
MEDIUMCVE-2026-102146PoC
CRITICALCVE-2026-103255PoC
HIGHCVE-2026-103398PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.