CVE-2026-115572 is a vulnerability in pypdf that allows an attacker to craft a PDF causing long runtimes when the same missing indirect object is referenced repeatedly. This can degrade performance during file processing. The issue has been fixed in pypdf version 6.21.2. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.