{"id":10574,"date":"2026-09-04T18:51:17","date_gmt":"2026-09-04T10:51:17","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-45741"},"modified":"2026-09-04T18:51:17","modified_gmt":"2026-09-04T10:51:17","slug":"cve-2026-45741","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-45741","title":{"rendered":"CVE-2026-45741 [HIGH] &#8211; Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPu"},"content":{"rendered":"<p>Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg\/gotenberg\/outbound.go does not reject the 2002::\/16 6to4 prefix, the 64:ff9b::\/96 and 64:ff9b:1::\/48 NAT64 prefixes, the fec0::\/10 deprecated site-local prefix, Teredo, and other transition prefixes that can embed or route to non-public IPv4 destinations. The addr.Unmap operation only handles IPv4-mapped IPv6 addresses, so a crafted DNS AAAA record can cause the outbound HTTP client to treat an address wrapping an internal destination such as 169.254.169.254 as public. An unauthenticated attacker can use a conversion route with WithDenyPrivateIPs enabled to reach cloud metadata services, and the Chromium URL conversion route can return the internal response as a PDF, potentially exposing cloud credentials. Exploitation requires a deployment whose host routes the relevant IPv6 prefix, such as a dual-stack or NAT64-enabled environment. This issue is fixed in version 8.33.0.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg\/gotenberg\/outbound.go does not reject the 2002::\/16 6to4 prefix, the 64:ff9b::\/96 and 6<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-10574","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/10574","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10574"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10574"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}