A vulnerability in Gotenberg v8 prior to 8.31.0 allows injection of arbitrary ExifTool arguments via newline characters in metadata values. The flaw bypasses key sanitization by not validating metadata values, enabling attackers to inject pseudo-tags such as -FileName, -Directory, -SymLink, and -HardLink. This can lead to renaming, moving, overwriting files, and creating symlinks or hard links in the container filesystem, which runs as root by default. The issue is fixed in version 8.31.0.