CVE-2026-33205: 
NixOS vulnerability analysis and mitigation

CVE-2026-33205 is a Server-Side Request Forgery (SSRF) vulnerability in the background-image endpoint of calibre's e-book viewer web view. It affects all calibre versions prior to 9.6.0 and allows an attacker to perform blind GET requests to arbitrary URLs, enabling data exfiltration from the e-book sandbox. The vulnerability was published on March 27, 2026, and patched in calibre version 9.6.0. It carries a CVSS v3.1 base score of 5.5 (Medium) and a CVSS v4.0 base score of 4.8 (Medium) (GitHub Advisory).

The root cause (CWE-918) lies in the background_image() function in calibre/gui2/viewer/web_view.py, which accepts a hex-encoded filename parameter. When the decoded filename begins with https:// or http://, the function fetches the remote URL using calibre's browser object without any URL allowlist or restriction, effectively allowing scripts running in the sandboxed e-book context to initiate outbound HTTP GET requests to arbitrary destinations. Exploitation requires local access and user interaction (opening a malicious e-book), and is particularly dangerous when chained with the path traversal vulnerability described in GHSA-h3p4-m74f-43g6, which can be used to first read local files and then exfiltrate their contents via this SSRF endpoint (GitHub Advisory).

Successful exploitation allows an attacker to exfiltrate data from within the e-book sandbox environment and perform blind GET requests to services on the local network, potentially exposing sensitive information. When chained with the companion path traversal vulnerability (GHSA-h3p4-m74f-43g6), an attacker can read arbitrary files included in the e-book and silently exfiltrate their contents to an attacker-controlled server without any user awareness. There is no integrity or availability impact; the primary risk is confidentiality loss (GitHub Advisory).

No confirmed in-the-wild exploitation has been observed, and no standalone weaponized exploit is publicly available. The GitHub Security Advisory references a proof-of-concept in GHSA-h3p4-m74f-43g6 that chains both vulnerabilities together, but the advisory itself does not provide concrete exploitation steps. The EPSS score is approximately 0.014% (0.000140), indicating a very low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog (GitHub Advisory).

1. Craft a malicious e-book: Create an EPUB or other calibre-supported e-book file containing embedded JavaScript or CSS that references the calibre viewer's background-image endpoint with an attacker-controlled URL (e.g., http://attacker.com/exfil?data=...).
2. Chain with path traversal (optional): Use the companion vulnerability (GHSA-h3p4-m74f-43g6) within the same malicious e-book to read sensitive local files (e.g., files bundled in the e-book or accessible via path traversal).
3. Trigger the SSRF: When the victim opens the malicious e-book in calibre's viewer, the background_image() function detects the URL-prefixed filename and issues a blind HTTP GET request to the attacker-specified URL, carrying any exfiltrated data as query parameters or path components.
4. Collect exfiltrated data: Monitor the attacker-controlled server for incoming GET requests containing the exfiltrated file contents or internal network probe results (GitHub Advisory).

• Network: Unexpected outbound HTTP GET requests from the calibre process (calibre-debug, calibre, or associated Python processes) to external or unusual internal IP addresses/domains, particularly shortly after opening an e-book file.
• Process: The calibre viewer process spawning network connections to non-calibre update endpoints or unknown external hosts.
• File System: Unexpected cached image files written to the calibre viewer config directory (viewer_config_dir/background-images/) with filenames that decode (from hex) to HTTP/HTTPS URLs rather than standard image filenames.
• Logs: System or application logs showing calibre initiating HTTP connections to external hosts not associated with calibre's normal update or content delivery infrastructure (GitHub Advisory).

The primary remediation is to upgrade calibre to version 9.6.0 or later, which patches this vulnerability by restricting the background_image endpoint from fetching arbitrary remote URLs (GitHub Advisory). As a network-level workaround for users unable to upgrade immediately, implement egress firewall rules to block outbound HTTP/HTTPS connections from the calibre process to untrusted external hosts. Additionally, avoid opening e-books from untrusted or unknown sources in the calibre viewer until the patch is applied.

The vulnerability was reported by security researcher emilvirkki and disclosed via GitHub Security Advisories on March 27, 2026. Coverage has appeared on Linux-focused security news sites and community forums, including Fedora update announcements and German Linux security news (GitHub Advisory). No major vendor statements beyond the official advisory or significant social media discussion have been identified.