CVE-2026-44023
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Docling Core versions 1.5.0 through 2.74.1 insufficiently restricted remote request destinations and unsafely processed Content-Disposition headers, allowing access to local files outside the cache directory. This vulnerability enables SSRF attacks in applications that accept untrusted URLs.
Risk Assessment
The organization is at risk of local sensitive data exposure and potential SSRF escalation, leading to unauthorized file system access.
Recommendation
Immediately update Docling Core to version 2.74.1 or later, and restrict acceptance of untrusted URLs in applications using this library.
Other vulnerabilities in Docling Core
See all- CVE-2026-112310Medium
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.
- CVE-2026-44019High
A vulnerability in Docling Core (versions 2.5.0 through 2.74.0) allows local file:// image references and accepts inline data: content without a decoded-size limit. This may lead to unauthorized file access or excessive memory consumption.
Original NVD description (English source)
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS