docling-core-CVE-2026-24009

CVE-2026-24009 — docling-core Unsafe YAML Deserialization PoC + Notes This repo contains a proof-of-concept PoC and a simple scanner demonstrating CVE-2026-24009 , where docling-core can enable code execution when loading attacker-controlled YAML under specific dependency conditions. TL;DR Impact...

CVE-2026-112310

A flaw was found in docling-core. This vulnerability allows an attacker to cause information disclosure by bypassing restrictions designed to prevent access to local files. By submitting a crafted document containing direct filesystem paths within image references, an attacker can trick the...

agentfoundry (1.2.9.1), ai4rag (>=0.7.0, <=0.10.4) +23 more potentially affected by CVE-2026-112310 via docling-core (>=2.9.0, <=2.102.0)

docling-core PYPI version =2.9.0, =0.7.0, =0.1.0, =2.89.0, =0.19.2, =0.14.1, =1.40.0, =0.6.2, =2.0.0, =0.2.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-112310 Source advisory: SNYK:PYTHON-DOCLINGCORE-21460722...

External Control of File Name or Path

Overview docling-core is an A python library to define and validate data types in Docling. Affected versions of this package are vulnerable to External Control of File Name or Path via withembeddedpictures and ImageRef when exporting a DoclingDocument containing untrusted content. Plain filesyste...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

agentfoundry (1.2.9.1), ai4rag (>=0.7.0, <=0.10.4) +23 more potentially affected by CVE-2026-112310 via docling-core (>=2.9.0, <=2.102.0)

docling-core PYPI version =2.9.0, =0.7.0, =0.1.0, =2.89.0, =0.19.2, =0.14.1, =1.40.0, =0.6.2, =2.0.0, =0.2.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-112310 Source advisory: MEND:CVE-2026-112310...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310

The docling-core library, through version 2.102.0 , is vulnerable to a local file disclosure (CWE-73) vulnerability. This issue occurs because the software allows attackers to supply plain filesystem paths in ImageRef URIs , effectively bypassing the allow_image_file_uri gate. By submitting craft...

EUVD-2026-104402

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

PT-2026-117470

docling-core through 2.102.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow image file uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with...

CVE-2026-112310: External Control of File Name or Path

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

Docling Project: "docling-core" input validation error vulnerability

The Docling Project’s docling-core 2.102.0 and earlier versions have a vulnerability in input validation. This vulnerability stems from the fact that the ImageRef URI accepts pure file system paths and bypasses the allowimagefileuri restriction. Attackers can exploit this vulnerability by...

CVE-2026-44023

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)

docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.4.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: MEND:CVE-2026-44023...

CVE-2026-44023 Docling Core has unsafe remote filename resolution

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...

CVE-2026-44023 Docling Core has unsafe remote filename resolution

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...