Server-Side Application Vulnerability in WeasyPrint PDF Generation

CVE-2026-55073

What is CVE-2026-55073?

WeasyPrint, a tool for creating PDF documents in web applications, prior to version 70.0, exhibits a vulnerability that allows server-side applications to bypass restrictions set by configuring a restrictive url_fetcher. By passing attacker-influenced values to the HTML.write_pdf() function, an attacker can exploit the xmp_metadata and stylesheets options. This enables access to local files, which can be read and embedded directly into the output PDF, facilitating unauthorized data exposure. The vulnerability arises from the improper handling of resources in weasyprint/pdf/init.py and weasyprint/document.py, allowing for local resource loads and potential data leaks. This issue has been addressed in version 70.0.

References