Dashboard / CVE-2026-44022

CVE-2026-44022

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-06-24 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: None
A: None

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
docling docling 2.73.0 – 2.91.0

References & Advisories (2)

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.21%
Raw Score 0.002070
Percentile 10.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00207
2026-10-28
0.00207

Intelligence Sources

nvd ref →

External Links