CVE-2026-112310GHSA-jx5c-6gmw-72m3
docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
docling-project docling-core
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.34%Chance of exploitation activity in the next 30 days, higher than 25% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.
Text from CVE List
Affected versions 2
- docling-coreaffected: 2.5.0 before 2.103.0CVE List
- docling-core, pip>= 2.5.0, <= 2.102.0GitHub
References 7
- github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517Fixvia CVE List
- github.com/docling-project/docling-core/releases/tag/v2.103.0Fixvia CVE List
- github.com/docling-project/docling-core/pull/900Fixvia CVE List
- github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3Advisoryvia CVE List
- vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-plain-path-imagerefAdvisoryvia CVE List
- github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/reference.pyReferencevia CVE List
- github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.pyReferencevia CVE List