CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105746

The Docling library (versions 2.83.0 through 2.131.0 ) contains a vulnerability where the KServeV2OcrModel class fails to enforce the enable_remote_services policy. Specifically, the docling/models/stages/ocr/kserve_v2_ocr_model.py file sends page images to configured endpoints without checking i...

CVE-2026-105746 Docling: KServe v2 OCR engine does not enforce enable_remote_services

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kservev2ocrmodel.py sends page images to its configured endpoint without checki...