CVE-2026-105744 docling-project CVE debrief

Who should care

Defenders responsible for systems using the docling and docling-slim packages, particularly those using TikZ rendering with the Tectonic engine, should assess exposure and prioritize verification and remediation. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Defenders should also plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Why it matters

CVE-2026-105744 is a vulnerability in docling and docling-slim that allows for arbitrary file read/write and command execution when shell-escape is enabled. Defenders should prioritize verifying exposure and restricting use of shell-escape.

• Arbitrary file read/write can lead to data breaches or corruption
• Command execution can lead to system compromise or lateral movement
• Verification of exposure and remediation is necessary to prevent exploitation

Technical summary

The vulnerability is caused by the Tectonic engine not restricting TeX's file primitives when rendering TikZ pictures. This allows for arbitrary file read/write and command execution when shell-escape is enabled. The vulnerability affects docling and docling-slim packages on PyPI. Defenders should prioritize verifying exposure and restricting use of shell-escape. The Tectonic engine writes the picture source into a temporary document and runs the `tectonic` binary on it without any restriction on TeX's file primitives.

Defensive priority

Defenders should prioritize verifying exposure of TikZ rendering with the Tectonic engine and restrict use of shell-escape.

Recommended defensive actions

• Verify exposure of TikZ rendering with the Tectonic engine
• Restrict use of shell-escape
• Update to version 2.132.0 or later
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability allows for arbitrary file read/write and command execution when shell-escape is enabled. Affected versions are from 2.94.0 to 2.132.0 for both docling and docling-slim packages. The Tectonic engine does not restrict TeX's file primitives when rendering TikZ pictures, leading to the vulnerability. Defenders should verify exposure and restrict use of shell-escape.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.