CVE-2026-119207 is a high-severity vulnerability in the psutils product affecting versions 3.0 and later. It allows an attacker to craft a malicious PDF that triggers large memory usage by loading an invalid dictionary in strict mode. This can lead to resource exhaustion. The issue has been fixed in pypdf version 6.21.3. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.