---
id: CVE-2026-113605
title: Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database
summary: >-
  Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in
  DatabaseService.validateSqlContent() that allows administrators to bypass H2
  import restrictions using CREATE OR REPLACE ALIAS. Authenticated
  administrators can up…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-184
vendor: Stirling-Tools
product: Stirling-PDF
affected:
  - Stirling-PDF >= 2.13.2 <= 3.2.0
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-20T18:06:39.316366Z'
exploitAvailable: true
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T18:06:57.644Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113605'
references:
  - url: 'https://github.com/abraxas/stirling-h2-import-leftover'
  - url: 'https://abraxaslabs.tech/research/stirling-h2-import-leftover'
  - url: 'https://abraxaslabs.tech/research/stirling-pdf-3.2.0-leftovers'
  - url: >-
      https://github.com/Stirling-Tools/Stirling-PDF/blob/v3.2.0/app/proprietary/src/main/java/stirling/software/proprietary/security/service/DatabaseService.java
  - url: >-
      https://www.vulncheck.com/advisories/stirling-pdf-2.13.2-through-3.2.0-h2-sql-denylist-bypass-via-import-database
    label: >-
      VulnCheck Advisory: Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist
      Bypass via import-database
tags:
  - cve.org
  - exploit-available
ingestedAt: '2026-10-20T16:10:53.302Z'
---

## Overview

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, where RUNSCRIPT defines H2 Java function aliases and restores Java-method execution.

## Affected

- `Stirling-PDF >= 2.13.2 <= 3.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.