CVE-2026-45742

{
  "id": "CVE-2026-45742",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-19T15:17:05.170",
  "lastModified": "2026-10-27T13:10:00.360",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each multipart downloadFrom entry and allows those goroutines to concurrently write to the shared ctx.files, ctx.diskToOriginal, and ctx.filesByField maps and slices. Go maps and slices are not safe for concurrent mutation, so a crafted multipart request containing many downloadFrom entries can trigger a data race and terminate the process with a fatal concurrent map writes runtime error. The default configuration enables downloadFrom and disables authentication, allowing an unauthenticated remote attacker to crash an exposed conversion service and cause a denial of service. This issue is fixed in version 8.33.0."
    },
    {
      "lang": "es",
      "value": "Gotenberg es una API sin estado impulsada por Docker para archivos PDF. Desde la 8.10.0 hasta la 8.33.0, la función newContext en pkg/modules/api/context.go inicia una goroutine errgroup.Go por cada entrada multipart downloadFrom y permite que esas goroutines escriban concurrentemente en los mapas y slices compartidos ctx.files, ctx.diskToOriginal y ctx.filesByField. Los mapas y slices de Go no son seguros para la mutación concurrente, por lo que una solicitud multipart elaborada que contenga muchas entradas downloadFrom puede desencadenar una condición de carrera y terminar el proceso con un error de tiempo de ejecución fatal de escrituras concurrentes en mapas. La configuración predeterminada habilita downloadFrom y deshabilita la autenticación, permitiendo a un atacante remoto no autenticado bloquear un servicio de conversión expuesto y causar una denegación de servicio. Este problema está solucionado en la versión 8.33.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "gotenberg",
          "product": "gotenberg",
          "versions": [
            {
              "version": ">= 8.10.0, < 8.33.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-19T15:29:09.140356Z",
          "id": "CVE-2026-45742",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/gotenberg/gotenberg/commit/6671b5e5d30289087ca80130fc76f130cfa4dd7b",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gotenberg/gotenberg/releases/tag/v8.33.0",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-vp73-vjw8-8f32",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-vp73-vjw8-8f32",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}