← Database

CVE-2026-36576

CRITICAL CVSS: 9.8 Published: 2026-06-03 Modified: 2026-07-22

Description

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

Affected Platforms

Unknown

Weakness Type

CWE-78

References