{"schema":"threatline.record/2","record":{"id":"CVE-2026-108694","aliases":[],"summary":"ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter","details":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.","categories":["Unclassified"],"product":"ConvertX","vendor":"C4illin","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-108694","source_modified_at":"2026-10-18T11:53:07.284Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ConvertX","vendor":"C4illin","versions":[{"version":"0","lessThanOrEqual":"0.19.0","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.0026,"percentile":0.16759,"score_date":"2026-10-23"},"published_at":"2026-10-11T01:35:44.264Z","modified_at":"2026-10-18T11:53:07.284Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-108694","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-18T11:53:07.284Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108694","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/C4illin/ConvertX/issues/668","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/C4illin/ConvertX","tags":["product"]},{"source":"CVE List","url":"https://github.com/C4illin/ConvertX/blob/710bc7c71712af04198a39f003e3ea1aa5168a31/src/converters/pandoc.ts#L123-L152","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/convertx-through-0.19.0-arbitrary-file-read-via-pandoc-converter","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-18T11:29:27.966922Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-18T11:53:07.284Z","content_hash":"517a09f40df02e862353e5dccfa8443467ada88b672ea7a6687054ec0f5fc29b"}}