CVE-2026-44017 docling-project CVE debrief

Who should care

Organizations using Docling prior to version 2.91.0 should be aware of this vulnerability and take steps to mitigate it. This includes ensuring that the model download source is trusted and that the system is updated to version 2.91.0 or later. Additionally, defenders should monitor for potential exploitation attempts and implement compensating controls to prevent arbitrary file writes.

Technical summary

The vulnerability exists in the EasyOCR model download functionality of Docling, where ZIP archives are extracted without validating member paths. This allows for Zip Slip attacks, which can lead to arbitrary file writes and potential remote code execution. The vulnerability is fixed in version 2.91.0. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a high severity.

Defensive priority

High priority should be given to updating Docling to version 2.91.0 or later. Defenders should also monitor for potential exploitation attempts and implement compensating controls to prevent arbitrary file writes.

Recommended defensive actions

• Update Docling to version 2.91.0 or later
• Monitor for potential exploitation attempts
• Implement compensating controls to prevent arbitrary file writes
• Verify the integrity of the model download source
• Consider implementing additional security measures to prevent supply chain attacks

Evidence notes

The vulnerability is documented in the CVE record and the NVD detail page. The vendor has released a patch for the vulnerability in version 2.91.0. Red Hat has also provided additional information on the vulnerability, including a bugzilla entry and a CSAF VEX document.

Official resources