{"id":"CVE-2025-11058","aliases":["GHSA-cfmv-h8fx-85m7","PYSEC-2026-2058"],"title":"xml2rfc has an arbitrary file read vulnerability","summary":"xml2rfc has an arbitrary file read vulnerability","severity":"high","vendor":"xml2rfc","product":"xml2rfc","ecosystem":"pip","affected":["xml2rfc < 3.30.1"],"patched":["xml2rfc 3.30.1"],"published":"2025-08-26","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-cfmv-h8fx-85m7","references":[{"url":"https://github.com/ietf-tools/xml2rfc/security/advisories/GHSA-cfmv-h8fx-85m7"},{"url":"https://github.com/ietf-tools/xml2rfc/commit/f2b245bc0aeeac0667c8f74e976c466c5991f0e4"},{"url":"https://github.com/ietf-tools/xml2rfc"}],"tags":["osv","pip"],"ingestedAt":"2026-07-08T18:25:48.359Z","slug":"CVE-2025-11058","body":"## Overview\n\n### Impact\nWhen generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the XML.\n\n### Workarounds\nTest untrusted input with `link` elements with `rel=\"attachment\"` before processing.\n\n### Credits\nThis vulnerability was reported by Mohamed Ouad from [Doyensec](https://doyensec.com/).\n\n## Affected packages\n\n- `xml2rfc < 3.30.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `xml2rfc 3.30.1`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}