EUVD-2026-96697
GHSA-r4xg-82px-pwx6
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to ConvertX instance
-
DeliveryUpload reStructuredText with absolute-path include directive
-
ExploitPandoc converts file without --sandbox
-
ExecutionReferenced server file embedded in output
-
ImpactDownload output and exfiltrate file contents
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V5 - File Handling File name/path control
|
| Exploitation Conditions | Requires an authenticated ConvertX account (PR:L) on an instance running version through 0.19.0, and the target conversion must route through the Pandoc converter (src/converters/pandoc.ts), which in affected versions invokes Pandoc without the --sandbox flag - this is the default behavior, so no special non-default configuration is needed beyond having the Pandoc-based conversion path available. The attacker must be able to upload a reStructuredText document containing an include directive with an absolute file path and retrieve the converted output. Limiting factors: a valid login is mandatory (no anonymous exploitation), impact is confined to reading files accessible to the ConvertX/Pandoc process user, and exploitation depends on the Pandoc converter being reachable to the attacker's account. |
| Impact | This is a credible but moderate-priority issue rather than an urgent one. The provided CVSS 4.0 vector (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N) scores 7.1 (High) and aligns well with the description: network-reachable, low attack complexity, requires low privileges (PR:L = an authenticated application user), no user interaction, with high confidentiality impact and no integrity or availability impact - consistent with a pure arbitrary file read (CWE-73). No EPSS score, CISA KEV listing, or SSVC decision data was supplied, and no public exploit was indicated in the input, so there is no public exploit identified at time of analysis. The PR:L requirement is the key limiting factor: exploitation is gated behind a valid account, which meaningfully reduces the risk for instances that restrict registration, but is a weak barrier on multi-user or self-service deployments. All signals point the same way with no conflict, though the absence of EPSS/KEV/SSVC means widespread or targeted exploitation cannot be confirmed or ruled out from the data provided. |
| Exploit ScenarioDerived | An authenticated ConvertX user uploads a crafted reStructuredText (.rst) file containing an include directive that references an absolute server path such as /etc/passwd or application config holding secrets. They submit it to the Pandoc converter, which runs without the --sandbox flag and resolves the include, then download the converted output which now embeds the targeted file's contents. No public exploit code was identified, but the technique is straightforward and fully described in the referenced advisory and GitHub issue. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 11, 2026
Authenticated file read in ConvertX through 0.19.0 allows any logged-in user to retrieve arbitrary files from the server by uploading a crafted reStructuredText document that uses an include directive pointing at an absolute path, converting it, and downloading the generated output. The flaw exists because the Pandoc converter wrapper in src/converters/pandoc.ts invokes Pandoc without the --sandbox flag, so Pandoc's own file-inclusion behavior is left unrestricted; the CVSS 4.0 vector (AV:N/AC:L/PR:L/UI:N, high confidentiality only) confirms remote exploitation requires valid credentials and does not affect integrity or availability. There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV), so this is a credible but moderate-priority information-disclosure risk whose real severity depends on what the ConvertX/Pandoc process user can reach on the host.
RemediationAI
No vendor-released patch identified at time of analysis: the available references point to the upstream issue (https://github.com/C4illin/ConvertX/issues/668), the vulnerable source lines, and the VulnCheck advisory (https://www.vulncheck.com/advisories/convertx-through-0.19.0-arbitrary-file-read-via-pandoc-converter), none of which specify a fixed version, so no safe upgrade target can be cited and 0.19.0 or later should not be assumed remediated until the project publishes a fix. Until then, the highest-value compensating control is to invoke Pandoc with --sandbox (or patch src/converters/pandoc.ts to add it), which blocks Pandoc's filesystem reads at the cost of breaking legitimate conversions that intentionally pull in local resources; alternatively, disable or remove the Pandoc converter from the enabled-converter list, accepting that all Pandoc-dependent output formats become unavailable. Because exploitation requires a valid login, close self-service or open registration, purge unused accounts, and audit existing users so the PR:L precondition is not trivially satisfied; also run ConvertX in a container as a dedicated non-root user with a read-only root filesystem and only the minimum volumes mounted, so that any successful read exposes configuration, secrets, or host files only within that constrained namespace. As detective controls, log Pandoc conversions and alert on uploaded reStructuredText or Markdown containing '.. include::' or similar directives and on conversions whose output size is anomalous relative to the input, and consider egress/ingress filtering of the ConvertX service so untrusted users cannot reach it directly.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
ConvertX (c4illin/ConvertX, CPE cpe:2.3:a:c4illin:convertx:*:*:*:*:*:*:*:*) is a self-hosted, web-based file-conversion service that shells out to external converters, one of which is Pandoc, wrapped in src/converters/pandoc.ts (the vulnerable logic sits around lines 123-152 of commit 710bc7c7). The root cause class is CWE-73, External Control of File Name or Path: the application passes attacker-influenced document content to a downstream tool and does not constrain the file paths that tool may resolve. Pandoc's reStructuredText reader honors the '.. include::' directive and, when run without --sandbox, will read the referenced file from the local filesystem and splice its contents into the converted output; ConvertX then hands that output back to the uploader as a normal conversion result. Because the affected code path is the default way Pandoc conversions are performed, no non-default configuration is required other than the Pandoc-based converter being reachable from the attacker's account. Impact is limited to confidentiality of files readable by the user the ConvertX/Pandoc process runs as.
Know when Convertx gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Authenticated app user (PR:L) sends a crafted file over the network (AV:N/AC:L/UI:N) to read arbitrary files, yielding high confidentiality but no integrity/availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.
Executive ViewAI
ConvertX through 0.19.0 contains an authenticated file-read flaw that lets any logged-in user retrieve arbitrary server files by converting a crafted reStructuredText document. There is no public exploit identified at time of analysis, but exposed instances could leak application secrets, configuration files, or other data accessible to the service account. Leadership should care because the risk is remote yet requires credentials, and the real impact depends on how tightly the ConvertX/Pandoc process is isolated from sensitive host resources.
No vendor-released patch identified at time of analysis. Interim mitigations include adding --sandbox to the Pandoc invocation or disabling reStructuredText include directives, running ConvertX/Pandoc as a least-privilege service account in an isolated container with no host mounts, restricting ConvertX access to trusted authenticated users, and monitoring conversions for absolute-path include attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Authenticated arbitrary file write in ConvertX versions prior to 0.16.0 allows a low-privilege user to escape the intend
Arbitrary file deletion in ConvertX prior to version 0.17.0 allows authenticated attackers to remove files outside the i
Authenticated low-privileged users of ConvertX before 0.19.0 can execute arbitrary Python code on the server by submitti
Path traversal in ConvertX (all releases prior to 0.18.0) lets an authenticated user write converted output files to arb
Cross-site request forgery in ConvertX versions prior to 0.18.0 lets an attacker permanently delete an authenticated use
Arbitrary file read in ConvertX 0.17.0 allows authenticated users to exfiltrate files accessible to the server process b
Exploit-DB