https://vulnerability.circl.lu/sightings/feed 2026-10-07T11:00:38.298253+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/449f32c3-3688-4145-861f-745c9de6fc99/export 2026-10-07T11:00:38.315618+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "449f32c3-3688-4145-861f-745c9de6fc99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105750", "type": "seen", "source": "https://gist.github.com/alon710/10ed8dd9612b431708d29f2d754ab7f4", "content": "# CVE-2026-105750: CVE-2026-105750: Local File Disclosure in Docling via Permissive HTML Rendering Requests Filter\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-10-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105750\n\n## Summary\nCVE-2026-105750 is a medium-severity local file disclosure vulnerability affecting the Docling and Docling-Slim libraries. When processing HTML documents using the optional Playwright rendering backend, the application fail to validate and restrict request URIs using the file:// scheme. This permits an attacker supplying a crafted HTML file to access, render, and exfiltrate local system files.\n\n## TL;DR\nA validation flaw in Docling's HTML rendering backend allows local file disclosure (LFD) when processing untrusted HTML files using Playwright.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-863 / CWE-552\n- **Attack Vector**: Network\n- **CVSS Base Score**: 5.9 (Medium)\n- **Exploit Status**: Proof of Concept (PoC) available\n- **CISA KEV Status**: No\n- **Vulnerable Versions**: >= 2.82.0, < 2.118.1\n- **Primary Impact**: Confidentiality (Arbitrary Local File Disclosure)\n\n## Affected Systems\n\n- Docling document processing environments running with HTML rendering enabled\n- **docling**: >= 2.82.0, < 2.118.1 (Fixed in: `2.118.1`)\n- **docling-slim**: >= 2.92.0, < 2.118.1 (Fixed in: `2.118.1`)\n\n## Mitigation\n\n- Upgrade docling and docling-slim to version 2.118.1 or later\n- Ensure HTMLBackendOptions.enable_local_fetch is set to False\n- Avoid utilizing HTMLBackendOptions.render_page=True when processing untrusted inputs\n- Process inputs as streams rather than local Path objects to enforce opaque-origin sandboxing\n\n**Remediation Steps:**\n1. Identify all deployment environments running docling or docling-slim.\n2. Update requirements.txt, poetry.lock, or other dependency files to reference version >=2.118.1.\n3. Execute pip install --upgrade docling docling-slim in the affected environment.\n4. Validate the configuration to ensure enable_local_fetch is disabled for user-supplied document parsers.\n\n## References\n\n- [GitHub Security Advisory GHSA-q43m-vhcp-mhvm](https://github.com/docling-project/docling/security/advisories/GHSA-q43m-vhcp-mhvm)\n- [Fix Commit 1612b88](https://github.com/docling-project/docling/commit/1612b8875b0937447ce3122536fb5360a7102a0a)\n- [Docling v2.118.1 Release](https://github.com/docling-project/docling/releases/tag/v2.118.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105750) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-06T01:30:31.000000Z"} 2026-10-06T01:30:31+00:00