CVE-2026-110638

doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...

EUVD-2026-101266

doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...

CVE-2026-110638 doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path

doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog or tag. Attackers can embed $... or backtick command substitution in the file path, which DocData.readPDF passes to a shell-based pdftotext...

CVE-2026-110638

The doc-recog library (through version 1.1.6 ) is vulnerable to an OS command injection vulnerability. The flaw exists because the DocData._readPDF function passes unvalidated document paths from the recog() or tag() functions to a shell-based pdftotext execution call. Attackers can exploit this ...