TI-2026-32062 Aliases CVE-2026-44022 GHSA-2j5p-7p5m-cvqr

Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

LOW 24CWE-22Published 2026-06-24 · Updated 2026-06-25

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Partial Red Hat: 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-22 and the CVSS impact.

Summary

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00207 10th percentileScored 2026-11-07

Fix Partial docling (docling-project): 2.91.0docling (PyPI): 2.91.0Red Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
docling-project	docling	2.73.0 to before 2.91.0	2.91.0	Patch available	CNA
—	docling (PyPI)	2.73.0 to before 2.91.0	2.91.0	Patch available	GHSA-2j5p-7p5m-cvqr

docling Vendordocling-project Affected 2.73.0 to before 2.91.0 Fixed in 2.91.0 Patch available CNA
docling (PyPI) Vendor— Affected 2.73.0 to before 2.91.0 Fixed in 2.91.0 Patch available GHSA-2j5p-7p5m-cvqr

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:docling:docling::::::python::*	2.73.0 to before 2.91.0	Vulnerable	docling-project

cpe:2.3:a:docling:docling:*:*:*:*:*:python:*:* Versions 2.73.0 to before 2.91.0 Vulnerable ·docling-project

Remediation

Fix · CNA docling (docling-project) Fixed in 2.91.0
Fix · GHSA-2j5p-7p5m-cvqr docling (PyPI) Fixed in 2.91.0 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat OpenShift AI (RHOAI)	Affected	No fix yet: Fix deferred

Timeline

2026-10-02 Threatist record created from CVE-2026-44022
2026-10-03 Alias added: GHSA-2j5p-7p5m-cvqr

References

Patch 1

https://github.com/docling-project/docling/security/advisories/GHSA-2j5p-7p5m-cvqr

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-44022

Other 3

TI-2026-68355 Docling Tectonic TikZ rendering enables arbitrary file read/write CVSS 3.1HIGH 8.8
TI-2026-68362 Arbitrary local file read in Docling OpenDocument backend CVSS 4.0MEDIUM 6.9
TI-2026-68360 Docling table span parsing causes CPU and memory exhaustion CVSS 3.1MEDIUM 6.5
TI-2026-68353 Docling sends configured HTTP headers to any remote image host CVSS 3.1MEDIUM 5.3
TI-2026-68359 Docling embeds local image files from crafted JSON documents CVSS 3.1MEDIUM 4.3
TI-2026-32061 Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CVSS 3.1HIGH 7.5

See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences