CVE-2026-36576

Summary

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/openlabs/docker-wkhtmltopdf-aas/issues/36

References

• https://github.com/openlabs/docker-wkhtmltopdf-aas/issues/36
• https://github.com/openlabs/docker-wkhtmltopdf-aas
• https://github.com/openlabs/docker-wkhtmltopdf-aas/blob/9f505797671c3339520dec5fc01dff3a6f324f2e/app.py#L40
• https://hub.docker.com/r/openlabs/docker-wkhtmltopdf-aas

• ←Previous
• Next→