Log in Start free

Vulnerability · Published Jun 24, 2026 · Assigned by GitHub_M

CVE-2026-44017Docling: Unsafe Zip Extraction in EasyOCR Model Download

High 7.5

In plain English

A high-severity path traversal in docling from docling-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 46.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromise the model download source (via supply chain attack, DNS spoofing, or MITM), they could write arbitrary files to any location writable by the process, potentially achieving remote code execution by overwriting Python files or system binaries, persistent backdoors by modifying startup scripts or SSH keys, and data corruption or system compromise. This vulnerability is fixed in 2.91.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIdocling2.91.0GHSA-cjqg-rq2h-2fvj
PyPIdocling2.91.0PYSEC-2026-2143

Affected products (as reported)

VendorProductVersions
docling-project docling < 2.91.0

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References