A vulnerability was found in Gotenberg up to 8.31.x and classified as critical. The impacted element is an unknown function in the library /forms/libreoffice/convert of the component LibreOffice Conversion Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-42591. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.