What’s Vulnerable › Vulnerabilities

CVE-2026-112310: docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-19 · updated 2026-10-19
• Weakness: CWE-73

Description

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.

Affected products

• docling-project docling-core: from 2.5.0 before 2.103.0 — fixed in 2.103.0

How to fix

Upgrade to a fixed version: docling-project docling-core 2.103.0. Check the vendor advisory for mitigations.

References

• https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/reference.py
• https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.py
• https://github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517
• https://github.com/docling-project/docling-core/pull/900
• https://github.com/docling-project/docling-core/releases/tag/v2.103.0
• https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3
• https://www.vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-plain-path-imageref

Get alerted when CVE-2026-112310 or the next vulnerability affects your stack