A critical vulnerability has been identified in the PDF parser module of Apache Tika. The vulnerability could allow attackers to gain access to sensitive data and execute malicious requests on internal systems.
According to security researchers, the vulnerability, codenamed CVE-2025-54988, affects multiple versions of the software and has been rated critical. It is related to an XML External Entity (XXE) injection in the PDF parser module of Apache Tika (org.apache.tika:tika-parser-pdf-module).
Amazon researchers Paras Jain and Yakov Shafranovich discovered that versions 1.13 through 3.2.1 are vulnerable to exploitation via specially crafted XFA (XML Forms Architecture) files embedded in PDF documents.
See also: Apple zero-day: New vulnerability found – Update now
Apache Tika vulnerability: How the attack works
The attack involves manipulating XFA content within PDF files to enable XXE processing, which can lead to unauthorized data disclosure and server-side request forgery attacks. XFA technology, developed by Adobe, allows PDF documents to contain dynamic form content using XML structures. However, improper handling of external entity references in these XML structures creates a path for malicious exploitation.
Researchers observed that the vulnerability affects multiple Apache Tika packages that depend on the PDF parser module, including tika-parsers-standard-modules, tika-parsers-standard-package, tika-app, tika-grpc, and tika-server-standard.
This widespread impact significantly increases the potential attack surface in enterprise environments that rely on Tika for document processing capabilities .
Apache Tika: Vulnerability Impact
Security experts emphasize the urgent need to address this vulnerability, due to its potential to steal sensitive data and monitor internal networks. Attackers could exploit the XXE vulnerability to read local files, gain access to internal network resources, or force the vulnerable system to make requests to attacker-controlled servers, potentially leading to data leakage or further system compromise.
See also: Clickjacking: Vulnerabilities in popular passwordmanagers
Upgrade
Organizations using affected versions should immediately upgrade to Apache Tika version 3.2.2, which contains the necessary security fixes to address the vulnerability. The Apache Software Foundation has released this update specifically for this vulnerability.
System administrators should also implement additional security measures, including input validation for PDF uploads, network segmentation to mitigate potential XXE exploit impact, and monitoring for suspicious XML processing activities.
Given the critical nature of this vulnerability and the widespread use of Apache Tika by enterprises, security teams should prioritize this update. Tika is used by numerous applications and organizations to parse and extract metadata from documents, images, and media files. This means that the vulnerability is not limited to isolated scenarios, but can impact multiple systems that leverage the same library.
The fact that the exploit is based on XFA (XML Forms Architecture) makes it even more complex, as many tools and users are not even aware that PDFs can contain such XML structures. An organization that considers PDFs to be “safe” files to upload or exchange may find itself exposed without realizing it. With a single malicious PDF, attackers can cause data exfiltration, extract credentials or configuration files from the server, or exploit the weakness for lateral movement within a corporate network.
See also: CodeRabbit: Vulnerability allowed access to 1 million repositories
Additionally, the possibility of a Server-Side Request Forgery (SSRF) attack is extremely dangerous. Through SSRF, an attacker can use the vulnerable server as a “middleman” to interact with internal services that are normally not accessible from the internet. This can lead to attacks against cloud metadata services (e.g. AWS instance metadata API), allowing token theft and further escalation of attacks.
Strategically, this vulnerability demonstrates how important security is in content processing. Any system that accepts files from external users should consider them a priori dangerous and implement sandboxing, validation, and network segmentation. Rapid migration to Apache Tika version 3.2.2 is essential, but equally important is cultivating a culture of continuous monitoring and rapid response to CVEs announcements.
