CVE-2026-54668 | Kitodo Kitodo.Production up to 3.9.1 XML Parsing Helpers XMLUtils.java xml external entity reference

October 23, 2026 Yanac

A vulnerability was found in Kitodo Kitodo.Production up to 3.9.1. It has been rated as critical. Affected is the function parseXMLString/getNumberOfEADElements/checkIfXmlIsWellFormed of the file org/kitodo/production/helper/XMLUtils.java of the component XML Parsing Helpers. Performing a manipulation results in xml external entity reference.

This vulnerability is known as CVE-2026-54668. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More