Detecting prompt injections in PDFs for AI agents
Describes judges to catch hidden text and prompt injections in financial PDFs processed by Claude AI agents.
1
Stories per day · 30 days
3 RSS
Relatedrce3zdi3adobe2heap-overflow2libreoffice2mcp2memory-corruption2ubuntu2acrobat1adobepdfl1apache-openoffice1audiobooks1codex1cve-2026-399191cve-2026-632731cve-2026-632741cve-2026-819831cve-2026-836611
23 stories, newest first · one card per story
Stories tagged #pdf
Apache OpenOffice out-of-bounds write in PDF import
Apache OpenOffice through 4.1.16 allows out-of-bounds memory write when importing encrypted PDF files, causing crash or memory corruption.
libvips vulnerabilities in Ubuntu
libvips PDF handling and integer overflow issues in Ubuntu 16.04 to 24.04 LTS could cause crashes or arbitrary code execution.
PaperPilot, a local Rust PDF engine with WASM and MCP
The Hacker News post shows 45 points and five comments; the snippet gives no release or security details.
poppler mishandles PDF password length, enabling denial of service
Ubuntu notice USN-8950-1 says an attacker could crash poppler while decrypting certain encrypted PDF files.
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing out-of-bounds write that can run code if a user opens a malicious file.
Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption
Adobe patched Acrobat CVE-2026-81983, a PDF memory-corruption flaw with no known exploitation.
ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI discloses an Adobe Photoshop PDF JPEG integer overflow that can yield remote code execution.
Ghostscript flaw lets hackers hijack servers via PDF uploads
Ghostscript heap overflow CVE-2026-39919 can enable remote code execution through crafted PDF uploads, with no exploitation seen yet.
9
Show HN: Use your OpenAI subscription to create audiobooks
PDF TO MP3 turns documents into audiobooks through a Codex MCP server, billing speech to OpenAI or Google.
Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server
Wordfence disclosed Ghostscript CVE-2026-39919, a CVSS 9.8 flaw fixed in 10.08.0, with lab PDF remote code execution.
12
USN-8894-1: poppler vulnerabilities
Ubuntu's USN-8894-1 fixes Poppler overflows and a null dereference that can crash or run code.
More RMM Tools In the Wild, (Tue, Oct 6th)
Attackers phish victims with a fake PDF that installs Action1’s signed RMM agent for persistence.
Improper redaction reveals Google Data Center water and electricity usage
Failed PDF redaction exposed Google Nebraska data centers' power, water use, and expected tax refunds.
3
Datalab Introduces OmniExtractBench to Fix Bias and Opacity in Extraction Benchmarks
Datalab released OmniExtractBench, an open 620-document benchmark scoring PDF-to-JSON extraction with auditable verdicts.
4
CVE-2026-86950: The Great Glyph Grift - An in-the-wild iOS bug with a possible WhatsApp zero-click path
Apple fixed in-the-wild CoreGraphics CVE-2026-86950 in iOS 26.7.1; crafted PDF fonts can trigger an out-of-bounds write.
11
USN-8839-1: Atril vulnerabilities
Ubuntu patched Atril flaws, including a PDF GoToR bug that crafted files could use to run code.
USN-8837-1: pdfminer vulnerabilities
Ubuntu fixed pdfminer flaws CVE-2025-64512 and CVE-2025-70559 that may allow code execution through crafted PDFs.
Agents That Edit Documents: Measuring Agentic PDF Forgery Against a Non-Agentic Control
AI agents can forge financial documents with high success rates and low costs, though the threat is overestimated by a factor of two.
Document Retrieval-Aware Chunking (D-RAC): Universal Retrieval-Aware Ingestion of Enterprise Documents via PDF Normalization and Multimodal Markdown Conversion
D-RAC converts enterprise documents into retrieval-ready Markdown chunks, cutting chunking tokens 95.7% versus agentic methods.
ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-19772, a PDF type confusion flaw (CVSS 7.8) in Linux Mint Xreader allowing remote code execution via malicious files.
ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a CVSS 7.8 use-after-free remote code execution flaw (CVE-2026-81976) in Adobe Acrobat Reader DC triggered via malicious PDFs.
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
Doubloon Dredger malware abuses Notion and malicious PDFs to steal Microsoft authentication tokens from victims.
3