CVE-2026-43979 Details
Description
Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.0, PDFService._markdown_to_html() constructs an HTML document by interpolating user-controlled values — specifically title (sourced from research.title or research.query) and metadata key-value pairs — directly into an f-string without any HTML escaping. An authenticated attacker can craft a research query containing HTML special characters to inject arbitrary HTML tags into the document processed by WeasyPrint during PDF export. This injection can be chained to trigger a Server-Side Request Forgery (SSRF), bypassing the application's existing SSRF defenses in ssrf_validator.py. This vulnerability is fixed in 1.6.0.
A vulnerability in Local Deep Research versions prior to 1.6.0 allows for HTML injection via unescaped user input in the PDF export feature. The issue arises in the PDFService._markdown_to_html() method, where user-controlled values such as the research title and metadata are interpolated into an HTML document without proper escaping. An authenticated attacker can exploit this by crafting a research query that includes HTML special characters, injecting arbitrary HTML tags that are processed by WeasyPrint during PDF export. This injection can be leveraged to perform Server-Side Request Forgery (SSRF) attacks, bypassing the application's existing SSRF defenses.
Users are advised to upgrade to Local Deep Research version 1.6.0 or later, where this vulnerability has been patched. In version 1.6.0, user input is properly escaped before being embedded in the HTML for PDF export, and the WeasyPrint URL fetcher has been configured to block or restrict outbound HTTP requests that could lead to SSRF.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 28, 2026CISA-ADP
Assessed May 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/LearningCircuit/local-deep-research/pull/3082 | [email protected] | Issue TrackingVendor |
| https://github.com/LearningCircuit/local-deep-research/pull/3613 | [email protected] | Issue TrackingVendor |
| https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| LearningCircuit Local Deep Research | < 1.6.0 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | New CVE Received | [email protected] |