CVE-2026-105742: Docling: Configured HTTP headers sent to every remote image host named by a document

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-10-05 · updated 2026-10-07
Weakness: CWE-201

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when enable_remote_fetch=True and fetch_images=True. The loader does not restrict those credentials to the source document's origin, allowing requests that carry custom headers such as API keys and cookies to follow cross-origin redirects and expose the caller's configured credentials to a document author. The default configuration is not affected because remote fetching and configured headers are required. This issue is fixed in 2.132.0.

Affected products

docling-project docling: from 2.95.0 before 2.132.0 — fixed in 2.132.0

How to fix

Upgrade to a fixed version: docling-project docling 2.132.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-105742 or the next vulnerability affects your stack