{"schema":"threatline.record/2","record":{"id":"CVE-2026-112310","aliases":["GHSA-jx5c-6gmw-72m3"],"summary":"docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef","details":"docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.","categories":["Unclassified"],"product":"docling-core","vendor":"docling-project","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112310","source_modified_at":"2026-10-19T20:30:59.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"docling-core","vendor":"docling-project","versions":[{"lessThan":"2.103.0","status":"affected","version":"2.5.0","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"GitHub Advisory Database","source_url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","source_modified_at":"2026-10-19T17:28:13Z","fetched_at":"2026-10-23T21:14:28.314422Z","package":{"ecosystem":"pip","name":"docling-core"},"range":">= 2.5.0, <= 2.102.0"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112310","source_modified_at":"2026-10-19T20:30:59.607Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"docling-core","ecosystem":null},"version":"2.103.0","basis":"first unaffected version stated in the CVE record"},{"source":"GitHub Advisory Database","source_url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","source_modified_at":"2026-10-19T17:28:13Z","fetched_at":"2026-10-23T21:14:28.314422Z","package":{"ecosystem":"pip","name":"docling-core"},"version":"2.103.0"}],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00335,"percentile":0.25685,"score_date":"2026-10-23"},"published_at":"2026-10-19T15:28:59.122Z","modified_at":"2026-10-19T20:30:59.607Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-112310","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T20:30:59.607Z"},{"source":"GitHub Advisory Database","url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","fetched_at":"2026-10-23T21:14:28.314422Z","source_modified_at":"2026-10-19T17:28:13Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-112310","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","GitHub Advisory Database","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","tags":["vendor-advisory"]},{"source":"CVE List","url":"https://github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517","tags":["patch"]},{"source":"CVE List","url":"https://github.com/docling-project/docling-core/releases/tag/v2.103.0","tags":["release-notes"]},{"source":"CVE List","url":"https://github.com/docling-project/docling-core/pull/900","tags":["patch","issue-tracking"]},{"source":"CVE List","url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/reference.py","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.py","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-plain-path-imageref","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-19T17:37:11.808325Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-19T20:30:59.607Z","content_hash":"b907d7a76d27d7d69f0bebfbeefc0c29098220ae92f1791e52527bb307c52d86"}}