Cédric Krier discovered a vulnerability in Tryton where weasyprint can access local files during PDF report rendering, leading to a CVSS score of 4.9. This vulnerability allows for high confidentiality impact with no required user interaction or privileges. There is no workaround, and affected users must upgrade their trytond installations to resolved versions. Some custom reports may need adjustments after the upgrade to use publicly accessible HTTP files instead of local ones.