Server-Side Request Forgery Protection Bypass in WeasyPrint PDF Generation Tool
CVE-2025-68616

7.5HIGH

Key Information:

Vendor

Kozea

Status
Weasyprint
Vendor
CVE Published:
19 January 2026

What is CVE-2025-68616?

WeasyPrint, a popular tool for web developers to generate PDF documents, has a vulnerability that allows an attacker to bypass server-side request forgery (SSRF) protections. This occurs in its default_url_fetcher prior to version 68.0, enabling unauthorized access to internal resources, such as localhost services and cloud metadata endpoints. The vulnerability arises because the urllib library does not re-validate HTTP redirects against the developer's security policies, despite the presence of a custom url_fetcher designed to prevent such access. The issue has been addressed in version 68.0, which includes a fix to enhance security.

Affected Version(s)

WeasyPrint < 68.0

References

https://github.com/Kozea/WeasyPrint/security/advisories/G...
x_refsource_CONFIRM
https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.