CVE-2026-105748: Docling: Crafted DoclingDocument JSON embeds local image files into converted output
docling accepts serialized DoclingDocument JSON as an input format (InputFormat.JSON_DOCLING, enabled by default). A crafted JSON file can set a picture’s image uri to a local file path. When the converted document is exported with embedded images (ImageRefMode.EMBEDDED, the CLI default for Markdown and HTML), the referenced file is read and embedded as base64 in the output.
References
- github.com/advisories/GHSA-p944-4xh2-x776
- github.com/docling-project/docling/commit/d4bb776884aba9aa3132f54773f420853cf7afe4
- github.com/docling-project/docling/pull/4417
- github.com/docling-project/docling/releases/tag/v2.131.0
- github.com/docling-project/docling/security/advisories/GHSA-p944-4xh2-x776
- nvd.nist.gov/vuln/detail/CVE-2026-105748
Code Behaviors & Features
Detect and mitigate CVE-2026-105748 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →