CVE-2026-55073— WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
Quick assessment
Affected
Kozea WeasyPrint
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WeasyPrint 帮助 Web 开发人员生成 PDF 文档。在 70.0 之前，如果服务器端应用配置了一个限制性的 ，并将受攻击者影响的值传入 ，攻击者可以通过 或 选项绕过该限制。 具体而言，在 中， 调用 时未使用文档的 ，这使得可访问的本地文件可以被读取并原样嵌入到输出的 PDF 中。在 中， 构造 时也未使用文档的 ，从而允许加载本地或内部资源，并且这种宽松的限制会被嵌套的 CSS 和 引用所传播。其中， 通道会应用已获取的资源，但本身并不会将样式表中的注释原样披露出来。 该问题已在 70.0 版本中修
Possible ATT&CK Techniques 2 AI
T1195 · Supply Chain Compromise T1041 · Exfiltration Over C2 Channel
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-55073
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
Source: CVE Program / CVE List V5
Vulnerability Description
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTML.write_pdf() can have the restriction bypassed through the xmp_metadata or stylesheets options. In weasyprint/pdf/init.py, xmp_metadata calls select_source() without the document url_fetcher, allowing an accessible local file to be read and embedded verbatim in the output PDF. In weasyprint/document.py, stylesheets constructs CSS() without the document url_fetcher, allowing local or internal resource loading and propagating the permissive fetcher through nested CSS imports and url() references. The stylesheets channel applies fetched resources but does not by itself disclose stylesheet comments verbatim. This issue is fixed in version 70.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kozea | WeasyPrint | < 70.0 | - |
|
II. Public POCs for CVE-2026-55073
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55073
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55073 (1)
Vendor Advisories for CVE-2026-55073 (1)
Vendor Pages for CVE-2026-55073 (1)
-
🔗 Release v70.0 · Kozea/WeasyPrint · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same vendor: Kozea
-
CVE-2026-49452
WeasyPrint: CSS Injection via Presentational Hints -
CVE-2026-31899
CairoSVG vulnerable to Exponential DoS via recursive <use> e -
CVE-2025-68616
WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) -
CVE-2024-28184
WeasyPrint allows the attachment of arbitrary files and URLs -
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external
Same weakness: CWE-918
-
CVE-2026-91081
Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpo -
CVE-2026-91079
Huly Platform through 0.7.426 SSRF via Print Service -
CVE-2026-54452
safeurl: Missing IPv6 CIDR Ranges in Blocklist -
CVE-2026-57126
praisonaiagents: SSRF guard validates literal IPs only and n -
CVE-2026-90790
a2aproject a2a-python Push Notification Sender base_push_not
V. Comments for CVE-2026-55073
No comments yet