docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.
CVE-2026-112310
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-112310
docling-core
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/docling-project/docling-core",
"vendor": "docling-project",
"product": "docling-core",
"versions": [
{
"status": "affected",
"version": "2.5.0",
"lessThan": "2.103.0",
"versionType": "semver"
}
],
"packageURL": "pkg:pypi/docling-core",
"collectionURL": "https://pypi.org",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-112310
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #40994 · Revision 1
- Added to Heist Feed
- Publisher date