CVE-2026-55229

Name of the Vulnerable Software and Affected Versions Gotenberg version 8.33.0

Description A Server-Side Request Forgery (SSRF) issue exists in the /forms/libreoffice/convert endpoint. By uploading a specially crafted DOCX document, an attacker can force LibreOffice to retrieve external resources from attacker-controlled destinations during the conversion process. This allows for blind SSRF, which can be used for internal network discovery and interacting with internal services.

Additionally, the conversion engine allows the referencing of local filesystem resources as image sources. When a local file path is specified in an image tag, LibreOffice loads the resource and embeds it into the resulting document, potentially leading to the disclosure of sensitive files accessible to the LibreOffice process.

Recommendations As a temporary workaround, restrict access to the /forms/libreoffice/convert endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.