Docling Core: Unsafe remote filename resolution

高 8.6CVE-2026-44023 · GHSA-jmmv-h3mp-59v8 · PYSEC-2026-2457 · 16/07/2026 公開 · 24/10/2026 更新

要点

CVE-2026-44023 は docling-core, docling-core (docling) に影響する深刻度「高」 (CVSS 8.6) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.43%（全脆弱性の 37.0% より高い）。
対処：2.74.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
docling-core PyPI	`≥ 1.5.0, < 2.74.1`	`2.74.1`
docling-core docling	`≥ 1.5.0, < 2.74.1`	`2.74.1`

概要

Impact

In versions >= 1.5.0, < 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner.

In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory.

Patches

Patched in docling-core 2.74.1. The fix adds stricter validation for remote destinations and normalizes server-provided filenames before use.

Users should upgrade to:

docling-core >= 2.74.1

Workarounds

If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality.

References

Fix release: v2.74.1

NVD の説明

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.