CVE-2026-105751

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocument_backend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced part is not found in the document archive. The _image_ref_from_odf_image function reads that attacker-controlled path without a scheme check, extraction-directory confinement, or the enable_local_fetch setting used by other backends. Readable files that Pillow can decode as images are embedded in converted output, and other existing paths can be distinguished through the attempted read. This issue is fixed in 2.120.3.

• CWE-22

• https://github.com/docling-project/docling/commit/6ee9965adfc364b3696a67c825ec2f0d9cee4311
• https://github.com/docling-project/docling/pull/4015
• https://github.com/docling-project/docling/releases/tag/v2.120.3
• https://github.com/docling-project/docling/security/advisories/GHSA-4xhp-xg4w-8ppm
• https://github.com/docling-project/docling/security/advisories/GHSA-4xhp-xg4w-8ppm

Published

Oct 5, 2026

Last Modified

Oct 6, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105746Docling simplifies document processing by parsing diverse fo…2.2
• CVE-2026-105747Docling simplifies document processing by parsing diverse fo…4.3
• CVE-2026-105748Docling simplifies document processing by parsing diverse fo…4.3
• CVE-2026-105749Docling simplifies document processing by parsing diverse fo…6.5
• CVE-2026-10575IBM MQ could allow an authenticated attacker to cause a deni…8.8
• CVE-2026-105750Docling simplifies document processing by parsing diverse fo…5.9
• CVE-2026-105752vLLM is an inference and serving engine for large language m…3.1
• CVE-2026-105753vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-105754vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-105755vLLM is an inference and serving engine for large language m…4.2
• CVE-2026-105756vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-105757vLLM is an inference and serving engine for large language m…6.5