Log in Start free

Vulnerability · Published Oct 5, 2026 · Assigned by GitHub_M

CVE-2026-105745Docling: Plugin entry points are imported before the allow_external_plugins check

Medium 6.7

In plain English

A medium-severity security flaw in docling from docling-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.1%top 98.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entrypoints() before applying the allow_external_plugins setting, so every module registered in the Docling entry-point group is imported even when external plugins are disabled. An installed third-party or compromised package can therefore execute import-time code when Docling starts, while the subsequent namespace filter misleadingly reports that the plugin was not loaded. This issue is fixed in 2.131.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIdocling2.131.0GHSA-9jxx-vjrv-h2rq
PyPIdocling2.131.0PYSEC-2026-4192
PyPIdocling-slim2.131.0GHSA-9jxx-vjrv-h2rq
PyPIdocling-slim2.131.0PYSEC-2026-4210

Affected products (as reported)

VendorProductVersions
docling-project docling >= 2.27.0, < 2.131.0
docling-project docling-slim >= 2.27.0, < 2.131.0

Weakness: CWE-696, CWE-829 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

References