CVE-2026-36576

The openlabs docker-wkhtmltopdf-aas tool is vulnerable to an OS command injection in the app.py component. This flaw allows an unauthenticated attacker to execute arbitrary commands on the host system by sending a crafted POST request . The vulnerability affects versions up to commit 9f50579 . Th...