CVE-2026-102354 Details
Description
BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...). In deployments where PROXY_SECRET validation is not enabled, a direct client that controls authoritative DNS can forge the Origin header, supply a certificate, OCSP, CRL, or TSA URL that passes the proxy's accepted path checks, return a public address during validation, and return a private or link-local address during the later fetch. The endpoint can return allowed response bodies to the attacker, but exploitation requires precise timing, redirects and IP-literal obfuscation are blocked, and network reachability limits the target. This vulnerability is fixed in 2.8.7.
A Server-Side Request Forgery (SSRF) vulnerability via DNS rebinding has been identified in the BentoPDF CORS proxy worker, affecting versions through 2.8.6. The vulnerability arises because the worker performs DNS-over-HTTPS validation to check if a hostname resolves to a private IP, but this validation is separate from the actual fetch request. An attacker controlling authoritative DNS can exploit this by returning a public IP during validation and a private IP during the fetch, bypassing the SSRF protection. This issue is particularly concerning in self-hosted deployments off Cloudflare, where internal addresses can be reached.
Users are advised to upgrade to BentoPDF version 2.8.7, which addresses this vulnerability. For self-hosted deployments off Cloudflare, add network-level egress filtering to block outbound connections to private, loopback, link-local, and cloud-metadata addresses. If deploying on Cloudflare, do not attach a Tunnel, Service, or private-network binding to the worker.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/alam00000/bentopdf/commit/45496fcd2ed6e02dcdde0d3839cc5024c091760c | [email protected] | Source CodeVendor |
| https://github.com/alam00000/bentopdf/commit/58cd1a8893bfe06e4a59a72adc2e7db00a8b9266 | [email protected] | Source CodeVendor |
| https://github.com/alam00000/bentopdf/releases/tag/v2.8.7 | [email protected] | Release NotesVendor |
| https://github.com/alam00000/bentopdf/security/advisories/GHSA-wh78-rcw2-hhg9 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| BentoPDF | <= 2.8.6 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 14, 2026 | New CVE Received | [email protected] |