7.1
HighCVSS 3.1 · from VulnCheck
CVE-2026-113606
Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders
Stirling-PDF · Authorization bypass via user key · CWE-639AffectedStirling-PDF
FixNo fix listed yet.
PublishedOct 20, 15:40 · VulnCheck
ScoredOct 20 · 7.1 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
A successful attack can change data. CVSS impact.
Description
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/<victimUserId>, list files, and run pipelines to read, modify, or destroy victims' files.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed inStirling-PDF3.0.0 – 3.2.0–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known