CVE-2026-119205 is a vulnerability in pdfalyzer's pypdf component where cloning a DictionaryObject can cause an infinite loop. This flaw allows an attacker to craft a malicious PDF that triggers this behavior. The issue has been fixed in pypdf version 6.21.4. Users unable to upgrade immediately can apply the patch from the referenced pull request.