Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files. This vulnerability is fixed in 8.31.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ HIGH — CVE-2026-40893 Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly… CVSS 8.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-40893 #Docker #CyberSecurity #InfoSec
Post summary
The tweet announces a high‑severity CVE‑2026‑40893 affecting Gotenberg’s Docker API, providing its CVSS score and a link to a detailed analysis.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | thecodingmachine | gotenberg | - | - | - |