CVE-2026-105080

CriticalCVSS 9.9

Published: 03/10/2026(UTC)Translated: 03/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

24th percentile - higher than 24% of all known CVEs

Summary

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files and passes them to the ebook-convert program from Calibre. This allows executable code in .recipe or .downloaded_recipe files.

Risk Assessment

An attacker could supply a malicious recipe file, potentially leading to unauthorized code execution in the application context.

Recommendation

It is recommended to upgrade ConvertX to version 0.19.0 or later, which blocks recipe file processing.

Other vulnerabilities in ConvertX

CVE-2026-85618Medium
ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives. Attackers can upload .tex files containing \\input{path} or \\verbatiminput{path} directives to have the TeX engine read arbitrary files accessible to the server process and include them in downloadable PDF output.

Original NVD description (English source)

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS