CVE-2026-105748 docling-project CVE debrief

Who should care

Defenders responsible for maintaining and securing systems that use the docling package should assess their exposure to potential image file disclosure and prioritize verifying the affected versions and upgrading to version 2.131.0 or later.

Why it matters

CVE-2026-105748 is a vulnerability in the docling package that allows disclosure of image files readable by the converting process. Defenders should prioritize verifying the affected versions and upgrading to version 2.131.0 or later to prevent potential unauthorized access to sensitive files.

• Disclosure of image files readable by the converting process
• Potential unauthorized access to sensitive files
• Need to verify affected versions and upgrade to version 2.131.0 or later
• Possible impact on systems that use the docling package for document conversion

Technical summary

The docling package accepts serialized `DoclingDocument` JSON as an input format, which can contain a crafted JSON file with a local file path set as a picture's image `uri`. When the converted document is exported with embedded images, the referenced file is read and embedded as base64 in the output. This vulnerability affects docling and docling-slim packages with versions prior to 2.131.0. The vulnerability allows disclosure of image files readable by the converting process. Defenders should prioritize verifying the affected versions of docling and docling-slim, and upgrading to version 2.131.0 or later.

Defensive priority

Defenders should prioritize verifying the affected versions of docling and docling-slim, and upgrading to version 2.131.0 or later. They should also assess their exposure to potential image file disclosure and implement compensating controls to prevent unauthorized access to sensitive files.

Recommended defensive actions

• Verify the affected versions of docling and docling-slim
• Upgrade to version 2.131.0 or later
• Assess exposure to potential image file disclosure
• Implement compensating controls to prevent unauthorized access to sensitive files
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability is caused by the docling package's acceptance of serialized `DoclingDocument` JSON as an input format, which can contain a crafted JSON file with a local file path set as a picture's image `uri`. The file is then read and embedded as base64 in the output when the converted document is exported with embedded images. The vulnerability affects docling and docling-slim packages with versions prior to 2.131.0.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.