{"uuid": "10078d65-23a3-41df-b7fd-be74cb67f390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117419768211557281", "content": "CVE-2026-108694 ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108694https://github.com/C4illin/ConvertX/issues/668https://github.com/C4illin/ConvertXhttps://github.com/C4illin/ConvertX/blob/710bc7c71712af04198a39f003e3ea1aa5168a31/src/converters/pandoc.ts#L123-L152https://www.vulncheck.com/advisories/convertx-through-0.19.0-arbitrary-file-read-via-pandoc-converter#C4illin #ConvertX#CVE_2026_108694#bot", "creation_timestamp": "2026-10-11T01:51:15.407910Z"}