CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_member_count limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowed_formats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.

• CWE-409
• CWE-770

• https://github.com/docling-project/docling/commit/ebae65cd71c37c88b36185b406a449b92d8f7ffa
• https://github.com/docling-project/docling/pull/4412
• https://github.com/docling-project/docling/releases/tag/v2.131.0
• https://github.com/docling-project/docling/security/advisories/GHSA-3cr3-8m4c-fpxw

Published

Oct 5, 2026

Last Modified

Oct 6, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105741Langflow is a tool for building and deploying AI-powered age…7.1
• CVE-2026-105742Docling simplifies document processing by parsing diverse fo…3.7
• CVE-2026-105743Docling simplifies document processing by parsing diverse fo…4
• CVE-2026-105744Docling simplifies document processing by parsing diverse fo…7.5
• CVE-2026-105745Docling simplifies document processing by parsing diverse fo…6.7
• CVE-2026-105746Docling simplifies document processing by parsing diverse fo…2.2
• CVE-2026-105748Docling simplifies document processing by parsing diverse fo…4.3
• CVE-2026-105749Docling simplifies document processing by parsing diverse fo…6.5
• CVE-2026-10575IBM MQ could allow an authenticated attacker to cause a deni…8.8
• CVE-2026-105750Docling simplifies document processing by parsing diverse fo…5.9
• CVE-2026-105751Docling simplifies document processing by parsing diverse fo…6.9
• CVE-2026-105752vLLM is an inference and serving engine for large language m…3.1