CVE-2026-63630: CWE-502: Deserialization of Untrusted Data in alam00000 bentopdf
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf() sends an RFC 3161 TimeStampReq containing the PDF's SHA-256 MessageImprint to the attacker-selected endpoint. The default self-hosted configuration does not set VITE_CORS_PROXY_URL, so the request bypasses the proxy's ALLOWED_TSA_HOSTS checks and is sent directly. The disclosed digest can confirm that a document matches a known file and can correlate the same document across users without revealing its contents. This vulnerability is fixed in 2.8.7.
AI Analysis
Technical Summary
BentoPDF, a self-hosted client-side PDF toolkit, has a deserialization flaw in versions up to 2.8.6 where the deserializeWorkflow() function accepts an unvalidated tsaUrl from imported JSON. When a crafted workflow is imported and executed, timestampPdf() sends an RFC 3161 TimeStampReq containing the PDF's SHA-256 MessageImprint to an attacker-controlled endpoint. The default configuration bypasses proxy host checks, allowing direct leakage of the digest. This digest can be used to confirm document identity and correlate documents across users without revealing document contents. The issue is resolved in version 2.8.7.
Potential Impact
The vulnerability allows an attacker to obtain the SHA-256 digest of a PDF document processed by BentoPDF, which can be used to confirm if a document matches a known file and correlate the same document across different users. There is no direct impact on document contents or integrity, and no denial of service or code execution is indicated. The CVSS score is 3.4 (low severity).
Mitigation Recommendations
Upgrade BentoPDF to version 2.8.7 or later, where this vulnerability is fixed. No other mitigation is indicated or required according to the available data.
CVE-2026-63630: CWE-502: Deserialization of Untrusted Data in alam00000 bentopdf
Description
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf() sends an RFC 3161 TimeStampReq containing the PDF's SHA-256 MessageImprint to the attacker-selected endpoint. The default self-hosted configuration does not set VITE_CORS_PROXY_URL, so the request bypasses the proxy's ALLOWED_TSA_HOSTS checks and is sent directly. The disclosed digest can confirm that a document matches a known file and can correlate the same document across users without revealing its contents. This vulnerability is fixed in 2.8.7.
CVSS v3.1
Score 3.4low
Affected software
alam00000
bentopdf
pkg:github/alam00000/bentopdfRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
BentoPDF, a self-hosted client-side PDF toolkit, has a deserialization flaw in versions up to 2.8.6 where the deserializeWorkflow() function accepts an unvalidated tsaUrl from imported JSON. When a crafted workflow is imported and executed, timestampPdf() sends an RFC 3161 TimeStampReq containing the PDF's SHA-256 MessageImprint to an attacker-controlled endpoint. The default configuration bypasses proxy host checks, allowing direct leakage of the digest. This digest can be used to confirm document identity and correlate documents across users without revealing document contents. The issue is resolved in version 2.8.7.
Potential Impact
The vulnerability allows an attacker to obtain the SHA-256 digest of a PDF document processed by BentoPDF, which can be used to confirm if a document matches a known file and correlate the same document across different users. There is no direct impact on document contents or integrity, and no denial of service or code execution is indicated. The CVSS score is 3.4 (low severity).
Mitigation Recommendations
Upgrade BentoPDF to version 2.8.7 or later, where this vulnerability is fixed. No other mitigation is indicated or required according to the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-07-17T14:11:15.482Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab54645f7a7c541067fcbb0
Added to database: 09/24/2026, 15:48:21 UTC
Last enriched: 09/24/2026, 16:03:33 UTC
Last updated: 09/25/2026, 02:48:15 UTC
Views: 19
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.