CVE-2026-36576
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.
CVSS 3.1 · 9.8 Critical
EPSS 1.5%
KEV · Not listed
Vendors
Products