# CVE-2026-40893: Gotenberg arbitrary file manipulation via ExifTool tag bypass

Source: https://junglewise.ai/threats/cve-2026-40893-gotenberg-arbitrary-file-manipulation-via-exiftool-tag-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-14. Updated: 2026-05-18  
License: CC BY 4.0 with a link back

CVE-2026-40893 · Severity: high · CVSS 8.2 · Published 2026-05-14

Gotenberg is a service used to convert various document formats into PDF files. A security flaw allows unauthenticated remote attackers to bypass safety restrictions and rename, move, or change the permissions of files on the server. This could lead to service disruptions or allow an attacker to place malicious files in shared storage areas used by other applications.

Technologies: [github.com/gotenberg/gotenberg/v7 (Go)](https://junglewise.ai/threats/technologies/github-com-gotenberg-gotenberg-v7), [github.com/gotenberg/gotenberg/v8 (Go)](https://junglewise.ai/threats/technologies/github-com-gotenberg-gotenberg-v8), [Gotenberg](https://junglewise.ai/threats/technologies/gotenberg). Vendors: [Go](https://junglewise.ai/threats/vendors/go), [Gotenberg](https://junglewise.ai/threats/vendors/gotenberg).

## Quick answers

**Is CVE-2026-40893 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-40893 being exploited in the wild.

**How severe is CVE-2026-40893?** High severity, with a CVSS score of 8.2, published 14 May 2026.

**Which products and versions are affected?** github.com/gotenberg/gotenberg/v7 (Go) SEMVER:introduced=0; github.com/gotenberg/gotenberg/v8 (Go) <= 8.30.1, SEMVER:introduced=0, SEMVER:introduced=0,last_affected=8.30.1; Gotenberg < 8.31.0, <= 8.30.1.

**Is there a fix for CVE-2026-40893?** A patch was published on 2026-05-14: Fixed in version 8.31.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-40893 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-40893?** Check whether you run github.com/gotenberg/gotenberg/v7 (Go), github.com/gotenberg/gotenberg/v8 (Go) or Gotenberg at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Gotenberg utilizes ExifTool to process document metadata but fails to properly sanitize group-prefixed tag names. While the application attempts to block dangerous tags like 'FileName' and 'Directory', it uses a simple string comparison that does not account for ExifTool's support for group prefixes (e.g., 'System:FileName'). An attacker can bypass the blocklist by prepending 'System:' to restricted tags or by using the 'FilePermissions' tag, which was entirely omitted from the blocklist. This allows for arbitrary file manipulation (move/rename/chmod) within the container environment. The vulnerability is reachable via any endpoint that accepts the 'metadata' field, such as PDF conversion or merging routes.

## Affected products

- Gotenberg Gotenberg < 8.31.0

## Identifiers

- CVE-2026-40893
- GHSA-62p3-hvxx-fxg4
- GO-2026-5162

## Timeline

- 2026-05-01: advisory: GitHub Security Advisory published
- 2026-05-14: disclosed: CVE published to NVD
- 2026-05-14: patched: Fixed in version 8.31.0

## References

- [https://github.com/gotenberg/gotenberg/security/advisories/GHSA-62p3-hvxx-fxg4](https://github.com/gotenberg/gotenberg/security/advisories/GHSA-62p3-hvxx-fxg4)

## Related threats

- [Gotenberg server-side request forgery in IsPublicIP IPv6 handling](https://junglewise.ai/threats/cve-2026-126799-gotenberg-8-31-0-before-8-38-0-contains-a-server-side-request)
- [Gotenberg race condition in multipart downloadFrom handling](https://junglewise.ai/threats/cve-2026-45742-gotenberg-race-condition-in-multipart-downloadfrom-handling)
- [Gotenberg SSRF deny-list bypass in IsPublicIP via IPv6 prefixes](https://junglewise.ai/threats/cve-2026-45741-gotenberg-ssrf-deny-list-bypass-in-ispublicip-via-ipv6-prefixes)
- [Gotenberg path traversal via Windows-style separators in ZIP entry names](https://junglewise.ai/threats/cve-2026-44829-gotenberg-path-traversal-via-windows-style-separators-in-zip)
- [Gotenberg SSRF and local file disclosure in LibreOffice conversion](https://junglewise.ai/threats/cve-2026-55229-gotenberg-ssrf-and-local-file-disclosure-in-libreoffice)