{"id":"CVE-2026-110636","published":"2026-10-14T15:17:16.710","lastModified":"2026-10-16T19:18:44.867","description":"pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with shell=True to execute OS commands as the Python process.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/revolunet/pypdftk","tags":[]},{"url":"https://github.com/revolunet/pypdftk/blob/1d3b40c3b42fb3cc6b0192d34aba2c21a1efd369/pypdftk.py#L87-L123","tags":[]},{"url":"https://github.com/revolunet/pypdftk/issues/56","tags":[]},{"url":"https://github.com/revolunet/pypdftk/pull/57","tags":[]},{"url":"https://www.vulncheck.com/advisories/pypdftk-through-0.5-os-command-injection-via-pdf-and-output-paths","tags":[]}],"exploitRefs":[{"url":"https://github.com/revolunet/pypdftk","tags":[]},{"url":"https://github.com/revolunet/pypdftk/blob/1d3b40c3b42fb3cc6b0192d34aba2c21a1efd369/pypdftk.py#L87-L123","tags":[]},{"url":"https://github.com/revolunet/pypdftk/issues/56","tags":[]},{"url":"https://github.com/revolunet/pypdftk/pull/57","tags":[]}],"hasPoc":true,"ai":{"summary":"The pypdftk library contains a critical OS command injection vulnerability that allows attackers to execute arbitrary shell commands with the privileges of the Python process. This occurs when user-supplied file paths are directly incorporated into shell commands without proper sanitization.","exploitability":"Exploitation is straightforward for attackers who can control pdf_path or out_file parameters, requiring only a single vulnerable function call with malicious input that includes shell metacharacters.","blast_radius":"The vulnerability could affect any application using pypdftk to process PDF forms, potentially allowing attackers to execute arbitrary commands on the server with the same privileges as the Python process, leading to full system compromise.","remediation":"Upgrade to version 0.6 or later to address the OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() functions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","command-injection","pdf","python"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:48:43.820Z"}}