CVE-2026-106443: CWE-20: Improper Input Validation in Kozea WeasyPrint
Description
WeasyPrint versions prior to 70.0 contain an improper input validation vulnerability in the image-loading path. This flaw allows attacker-controlled PostScript code to be passed to Pillow's EpsImagePlugin, which invokes Ghostscript if installed. When Ghostscript is present and its sandbox can be bypassed, this can lead to remote code execution. The issue is resolved in WeasyPrint version 70.0.
CVSS v3.1
Score 8.8high
Affected software
Kozea
WeasyPrint
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-106443 is an improper input validation vulnerability (CWE-20) in Kozea WeasyPrint before version 70.0. The vulnerability arises because the image-loading code does not exclude EPS or PostScript formats when passing image bytes to Pillow's generic image dispatcher. On systems with Ghostscript installed, Pillow's EpsImagePlugin executes the PostScript interpreter, allowing attacker-supplied PostScript code to run. If the installed Ghostscript version has a sandbox bypass, this can lead to remote code execution. Systems without Ghostscript are not affected as they do not reach this rasterization path. The vulnerability is fixed in WeasyPrint 70.0.
Potential Impact
Successful exploitation can lead to remote code execution with high confidentiality, integrity, and availability impact on affected hosts that have Ghostscript installed with a sandbox bypass vulnerability. Hosts without Ghostscript are not vulnerable to this issue.
Mitigation Recommendations
Upgrade WeasyPrint to version 70.0 or later, which contains the fix that excludes EPS and PostScript formats from the image-loading path, preventing this vulnerability. No other mitigation is indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-06T16:49:40.590Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac546312cdf04f656d49cbd
Added to database: 10/06/2026, 19:04:17 UTC
Last enriched: 10/06/2026, 22:49:38 UTC
Last updated: 10/06/2026, 22:49:38 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.