Vulnerability · Published Jun 24, 2026 · Assigned by GitHub_M
CVE-2026-44022Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands
Medium 5.5
In plain English
A medium-severity path traversal in docling from docling-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | docling | 2.91.0 | GHSA-2j5p-7p5m-cvqr |
| PyPI | docling | 2.91.0 | PYSEC-2026-2145 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| docling-project | docling | >= 2.73.0, < 2.91.0 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
References
- https://github.com/docling-project/docling/security/advisories/GHSA-2j5p-7p5m-cvqr x_refsource_CONFIRM
- https://github.com/docling-project/docling/releases/tag/v2.91.0 x_refsource_MISC