Vulnerability · Published Jun 26, 2026 · Assigned by GitHub_M

CVE-2026-44018Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

Medium 5.5

In plain English

A medium-severity XML external entity in docling from docling-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 94.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	docling	2.91.0	GHSA-r3xg-rg9j-67fv
PyPI	docling	2.91.0	PYSEC-2026-2144

Affected products (as reported)

Vendor	Product	Versions
docling-project	docling	>= 2.45.0, < 2.91.0

Weakness: CWE-409, CWE-611, CWE-776 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv x_refsource_CONFIRM
https://github.com/docling-project/docling/releases/tag/v2.91.0 x_refsource_MISC