Docling Core: Unsafe remote filename resolution

CAO 8.6CVE-2026-44023 · GHSA-jmmv-h3mp-59v8 · PYSEC-2026-2457 · Công bố 16/07/2026 · cập nhật 24/10/2026

Tóm tắt nhanh

CVE-2026-44023 là lỗ hổng mức CAO (CVSS 8.6) ảnh hưởng docling-core, docling-core (docling).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.43%, cao hơn 37.0% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2.74.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
docling-core PyPI	`≥ 1.5.0, < 2.74.1`	`2.74.1`
docling-core docling	`≥ 1.5.0, < 2.74.1`	`2.74.1`

Mô tả

Impact

In versions >= 1.5.0, < 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner.

In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory.

Patches

Patched in docling-core 2.74.1. The fix adds stricter validation for remote destinations and normalizes server-provided filenames before use.

Users should upgrade to:

docling-core >= 2.74.1

Workarounds

If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality.

References

Fix release: v2.74.1

Mô tả của NVD

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.