InfoVulnerability
CVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversion
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-123357
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
GROBID, machine learning software for extracting information from scholarly documents, has a command injection flaw in its Linux non-server PDF conversion path before version 0.9.1. The PDF filename is interpolated into a bash -c command string in DocumentSource.pdfalto, so a single quote in the filename can break out of the quoting and run arbitrary commands with GROBID process privileges. The bundled REST server path is not affected.
Mitigation
Fixed in 0.9.1.
Related items
- MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog
- MediumCPython flaw exposes AI inference servers to sandbox escape attacksSimilar attack · CSO Online
- HighCVE-2026-88981: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0…Similar attack · NVD/CVE Database
- MediumBinance heist is stark example of AI governance gaps and basic security failuresSimilar attack · CSO Online
- HighCVE-2026-123019: eosphoros-ai DB-GPT untrusted code inclusion via trust_remote_codeSimilar attack · NVD/CVE Database