Aller au contenu
en Se connecter
6.9 Moyenne

CVE-2026-105751 Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocument_backend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced part is not found in the document archive. The _image_ref_from_odf_image function reads that attacker-controlled path without a scheme check, extraction-directory confinement, or the enable_local_fetch setting used by other backends. Readable files that Pillow can decode as images are embedded in converted output, and other existing paths can be distinguished through the attempted read. This issue is fixed in 2.120.3.

Produits et versions touchés

Produit Versions touchées Corrigé en
docling 2.107 2.107.0 → < 2.120.3 2.120.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de docling

Les 16 CVE de docling →
CVE-2026-105750 Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI… 5.9 Moyenne CVE-2026-105749 Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI… 6.5 Moyenne CVE-2026-105748 Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI… 4.3 Moyenne CVE-2026-105747 Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI… 4.3 Moyenne
Suivre cette CVE