CVE-2026-75529

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-75529", "assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "state": "PUBLISHED", "assignerShortName": "CIRCL", "dateReserved": "2026-08-17T20:52:34.285Z", "datePublished": "2026-08-17T20:52:42.520Z", "dateUpdated": "2026-08-18T15:16:47.908Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "pandora", "repo": "https://github.com/pandora-analysis/pandora", "vendor": "pandora-analysis", "versions": [{"lessThanOrEqual": "1.12.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Jeroen Pinoy"}, {"lang": "en", "type": "remediation developer", "value": "Raphael Vinot"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The <code>/task-download/&lt;task_id&gt;/.../pdf</code> endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using <code>send_file(task.file.path)</code> without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. </p>\n<p>Because Flask determines the response MIME type from the filename when a path is supplied, an attacker could submit a file whose content is recognized by Pandora as a PDF while its filename or extension causes the download endpoint to return it with a different, potentially active MIME type. </p>\n<p>A specially crafted PDF/polyglot file could therefore be served inline and interpreted by a victim's browser as HTML or another executable web format. If a victim with access to the submitted analysis follows the PDF download link, attacker-controlled script could execute in the security context of the Pandora application, potentially allowing access to application data or actions using the victim's session.</p>\n<p>The patch prevents the issue by explicitly returning PDF downloads with <code>Content-Type: application/pdf</code>, forcing <code>Content-Disposition: attachment</code>, and assigning a trusted <code>.pdf</code> filename based on the task UUID. </p><br>"}], "value": "Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using send_file(task.file.path) without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. \n\n\nBecause Flask determines the response MIME type from the filename when a path is supplied, an attacker could submit a file whose content is recognized by Pandora as a PDF while its filename or extension causes the download endpoint to return it with a different, potentially active MIME type. \n\n\nA specially crafted PDF/polyglot file could therefore be served inline and interpreted by a victim's browser as HTML or another executable web format. If a victim with access to the submitted analysis follows the PDF download link, attacker-controlled script could execute in the security context of the Pandora application, potentially allowing access to application data or actions using the victim's session.\n\n\nThe patch prevents the issue by explicitly returning PDF downloads with Content-Type: application/pdf, forcing Content-Disposition: attachment, and assigning a trusted .pdf filename based on the task UUID."}], "impacts": [{"capecId": "CAPEC-209", "descriptions": [{"lang": "en", "value": "CAPEC-209 XSS Using MIME Type Mismatch"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 6.9, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "shortName": "CIRCL", "dateUpdated": "2026-08-17T20:52:42.520Z"}, "references": [{"tags": ["patch"], "url": "https://github.com/pandora-analysis/pandora/commit/668ec65a93cee327e3d925da2698849c9e65625a"}], "source": {"discovery": "UNKNOWN"}, "title": "Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-18T15:16:41.342178Z", "id": "CVE-2026-75529", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-18T15:16:47.908Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-75529", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-18T15:16:41.342178Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-18T15:16:44.548Z"}}], "cna": {"title": "Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Jeroen Pinoy"}, {"lang": "en", "type": "remediation developer", "value": "Raphael Vinot"}], "impacts": [{"capecId": "CAPEC-209", "descriptions": [{"lang": "en", "value": "CAPEC-209 XSS Using MIME Type Mismatch"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/pandora-analysis/pandora", "vendor": "pandora-analysis", "product": "pandora", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.12.5"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/pandora-analysis/pandora/commit/668ec65a93cee327e3d925da2698849c9e65625a", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using send_file(task.file.path) without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. \n\n\nBecause Flask determines the response MIME type from the filename when a path is supplied, an attacker could submit a file whose content is recognized by Pandora as a PDF while its filename or extension causes the download endpoint to return it with a different, potentially active MIME type. \n\n\nA specially crafted PDF/polyglot file could therefore be served inline and interpreted by a victim's browser as HTML or another executable web format. If a victim with access to the submitted analysis follows the PDF download link, attacker-controlled script could execute in the security context of the Pandora application, potentially allowing access to application data or actions using the victim's session.\n\n\nThe patch prevents the issue by explicitly returning PDF downloads with Content-Type: application/pdf, forcing Content-Disposition: attachment, and assigning a trusted .pdf filename based on the task UUID.", "supportingMedia": [{"type": "text/html", "value": "<p>Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The <code>/task-download/&lt;task_id&gt;/.../pdf</code> endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using <code>send_file(task.file.path)</code> without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. </p>\n<p>Because Flask determines the response MIME type from the filename when a path is supplied, an attacker could submit a file whose content is recognized by Pandora as a PDF while its filename or extension causes the download endpoint to return it with a different, potentially active MIME type. </p>\n<p>A specially crafted PDF/polyglot file could therefore be served inline and interpreted by a victim's browser as HTML or another executable web format. If a victim with access to the submitted analysis follows the PDF download link, attacker-controlled script could execute in the security context of the Pandora application, potentially allowing access to application data or actions using the victim's session.</p>\n<p>The patch prevents the issue by explicitly returning PDF downloads with <code>Content-Type: application/pdf</code>, forcing <code>Content-Disposition: attachment</code>, and assigning a trusted <code>.pdf</code> filename based on the task UUID. </p><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "shortName": "CIRCL", "dateUpdated": "2026-08-17T20:52:42.520Z"}}}, "cveMetadata": {"cveId": "CVE-2026-75529", "state": "PUBLISHED", "dateUpdated": "2026-08-18T15:16:47.908Z", "dateReserved": "2026-08-17T20:52:34.285Z", "assignerOrgId": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "datePublished": "2026-08-17T20:52:42.520Z", "assignerShortName": "CIRCL"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "pandora", "repo": "https://github.com/pandora-analysis/pandora", "vendor": "pandora-analysis", "versions": [{"lessThanOrEqual": "1.12.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using send_file(task.file.path) without explicitly specifying the MIME type or forcing it to be downloaded as an attachment. \n\n\nBecause Flask determines the response MIME type from the filename when a path is supplied, an attacker could submit a file whose content is recognized by Pandora as a PDF while its filename or extension causes the download endpoint to return it with a different, potentially active MIME type. \n\n\nA specially crafted PDF/polyglot file could therefore be served inline and interpreted by a victim's browser as HTML or another executable web format. If a victim with access to the submitted analysis follows the PDF download link, attacker-controlled script could execute in the security context of the Pandora application, potentially allowing access to application data or actions using the victim's session.\n\n\nThe patch prevents the issue by explicitly returning PDF downloads with Content-Type: application/pdf, forcing Content-Disposition: attachment, and assigning a trusted .pdf filename based on the task UUID."}, {"lang": "es", "value": "Pandora est\u00e1 afectada por una vulnerabilidad de cross-site scripting almacenado en la funcionalidad de descarga de PDF. El endpoint /task-download/[task_id]/... / pdf verifica que el archivo enviado es un PDF utilizando la detecci\u00f3n de tipo de archivo basada en contenido de Pandora, pero previamente devolv\u00eda el archivo usando send_file(task.file.path) sin especificar expl\u00edcitamente el tipo MIME o forzar su descarga como un archivo adjunto.\n\nDebido a que Flask determina el tipo MIME de la respuesta a partir del nombre de archivo cuando se proporciona una ruta, un atacante podr\u00eda enviar un archivo cuyo contenido es reconocido por Pandora como un PDF mientras que su nombre de archivo o extensi\u00f3n hace que el endpoint de descarga lo devuelva con un tipo MIME diferente, potencialmente activo.\n\nUn archivo PDF/pol\u00edglota especialmente dise\u00f1ado podr\u00eda, por lo tanto, ser servido en l\u00ednea e interpretado por el navegador de una v\u00edctima como HTML u otro formato web ejecutable. Si una v\u00edctima con acceso al an\u00e1lisis enviado sigue el enlace de descarga de PDF, script controlado por el atacante podr\u00eda ejecutarse en el contexto de seguridad de la aplicaci\u00f3n Pandora, potencialmente permitiendo el acceso a datos o acciones de la aplicaci\u00f3n utilizando la sesi\u00f3n de la v\u00edctima.\n\nEl parche previene el problema devolviendo expl\u00edcitamente las descargas de PDF con Content-Type: application/pdf, forzando Content-Disposition: attachment, y asignando un nombre de archivo .pdf de confianza basado en el UUID de la tarea."}], "id": "CVE-2026-75529", "lastModified": "2026-10-23T16:10:00.313", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75529", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-18T15:16:41.342178Z", "version": "2.0.3"}}]}, "published": "2026-08-17T21:16:58.923", "references": [{"source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "url": "https://github.com/pandora-analysis/pandora/commit/668ec65a93cee327e3d925da2698849c9e65625a"}], "sourceIdentifier": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.12.5]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "pandora", "source": "cna", "vendor": "pandora-analysis"}, "product": "pandora", "vendor": "pandora-analysis"}], "created": "2026-08-17T23:00:05.951042+00:00", "updated": "2026-08-18T00:15:03.988243+00:00", "vendors": ["pandora-analysis", "pandora-analysis$PRODUCT$pandora"]}