CVE-2026-44016 Docling: Unsafe Playwright-based HTML Rendering

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...

CVE-2026-44016 Docling: Unsafe Playwright-based HTML Rendering

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: MEND:CVE-2026-44016...

CVE-2026-44020: Improper Restriction of Recursive Entity References in DTDs

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard xml.sax.parseString without protection against XML External Entity XXE attacks. An attacker could...

CVE-2026-44017: Improper Limitation of a Pathname to a Restricted Directory

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

CVE-2026-44016: Improper Control of Generation of Code

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...

CVE-2026-44022: Improper Limitation of a Pathname to a Restricted Directory

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicio...

CVE-2026-55447

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to t...

CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to t...

CVE-2026-55447

Langflow’s BaseFileComponent family (including Read File, DoclingInlineComponent, DoclingServe, DoclingRemoteComponent, NvidiaIngestComponent, VideoFileComponent, UnstructuredComponent) is affected by CVE-2026-55447. The underlying issue is in base_file.py: _unpack_bundle TAR extraction does not ...

CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to t...

CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files that are digested into the RAG, an attacker can direct the node to read any file on the file-system by absolute path. All components based on BaseFileComponent are vulnerable to t...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)

docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: GHSA-JMMV-H3MP-59V8...

Docling Core: Unsafe remote filename resolution

Impact In versions = 1.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality. References - Fix release: v2.74.1...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)

docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: OSV:GHSA-JMMV-H3MP-59V8...

GHSA-JMMV-H3MP-59V8 Docling Core: Unsafe remote filename resolution

Impact In versions = 1.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality. References - Fix release: v2.74.1...

Server-side Request Forgery (SSRF)

Overview docling-core is an A python library to define and validate data types in Docling. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the resolveremotefilename function, which processes headers from remote requests. An attacker can access sensitive fil...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)

docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: SNYK:PYTHON-DOCLINGCORE-17151724...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +9 more potentially affected by CVE-2026-44019 via docling-core (>=2.9.0, <=2.74.0)

docling-core PYPI version =2.9.0, =0.1.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.42.0, =0.1.0, =0.2.0 Source cves: CVE-2026-44019 Source advisory: GHSA-J5XP-7M2F-49JV...

Docling Core: Insufficient validation of image reference URIs

Impact In versions = 2.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible: - reject file: and data: image references from untrusted input - allow only approved local or remote image sources - apply input size and memory limits to processing workers References - Fix release: v2.74....