CVE-2026-119209 is a vulnerability in pypdf used by psutils that allows an attacker to craft a PDF file with cross-reference streams causing large memory usage when parsed. This can lead to resource exhaustion on the system processing the malicious PDF. The issue has been fixed in pypdf version 6.21.3.