CVE-2026-105750: Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-05 · updated 2026-10-07
Weakness: CWE-552

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_page=True) permits file URLs because HTMLDocumentBackend._get_browser_request_block_reason does not enforce the enable_local_fetch setting or confine local requests to the source document directory. Crafted path-backed HTML can embed a readable local text file in a browser-rendered page image when Playwright is installed. Only filesystem Path inputs are affected because stream inputs use an opaque origin, and the default configuration, command-line interface, docling-serve, and non-rendering backends are not affected. This issue is fixed in 2.118.1.

Affected products

docling-project docling: from 2.82.0 before 2.118.1 — fixed in 2.118.1

How to fix

Upgrade to a fixed version: docling-project docling 2.118.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-105750 or the next vulnerability affects your stack