CVE-2026-105750

The Docling library (versions 2.82.0 to 2.118.1 ) is vulnerable to a local file disclosure issue when using HTMLBackendOptions(render_page=True). The root cause is that HTMLDocumentBackend._get_browser_request_block_reason fails to enforce the enable_local_fetch setting or restrict local requests...