An authenticated administrator using Stirling‑PDF’s default H2 database can upload a crafted SQL file through the /api/v1/database/import-database endpoint. The application’s validation routine accepts statements containing a host of H2 keywords, allowing dangerous functions such as FILE_READ, CSVWRITE and CREATE ALIAS to be executed by the RUNSCRIPT command. This flaw enables an attacker to read arbitrary files and write attacker‑controlled startup files that the Python interpreter loads at startup, resulting in operating‑system command execution as the JVM service account.

The vulnerability affects all installations of Stirling‑PDF released before version 2.13.2, regardless of additional configuration, and is exclusive to the default H2 database configuration used by the authenticated administrator account.

With a CVSS score of 9.1 the flaw is considered critical. The EPSS score of 3% indicates a modest probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Exploit requires network access to the web API and an authenticated administrator session; once authenticated, the attacker can trigger the RCE via the import-database endpoint by uploading a malicious SQL file.