CVE-2026-47214

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/docling-project/docling/releases/tag/v2.94.0	Patch
https://github.com/docling-project/docling/security/advisories/GHSA-q29v-xc37-wh5m	Vendor Advisory Mitigation Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:docling:docling:*:*:*:*:*:python:*:*

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Docling simplifica el procesamiento de documentos mediante el análisis de diversos formatos y al proporcionar integraciones con el ecosistema de IA generativa. Antes de la 2.94.0, el backend HTML maneja de forma insegura las URI y las rutas. Esta vulnerabilidad se corrige en la 2.94.0.

Information

Published : 2026-06-26 16:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-47214

Mitre link : CVE-2026-47214

CVE.ORG link : CVE-2026-47214

JSON object : View

Products Affected

docling

docling

CWE

CWE-73

External Control of File Name or Path

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2026-47214", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47214", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T17:50:33.103623Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "docling-project", "product": "docling", "versions": [{"status": "affected", "version": "< 2.94.0"}]}]}], "published": "2026-06-26T16:16:31.373", "references": [{"url": "https://github.com/docling-project/docling/releases/tag/v2.94.0", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/docling-project/docling/security/advisories/GHSA-q29v-xc37-wh5m", "tags": ["Vendor Advisory", "Mitigation", "Patch"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-73"}, {"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0."}, {"lang": "es", "value": "Docling simplifica el procesamiento de documentos mediante el an\u00e1lisis de diversos formatos y al proporcionar integraciones con el ecosistema de IA generativa. Antes de la 2.94.0, el backend HTML maneja de forma insegura las URI y las rutas. Esta vulnerabilidad se corrige en la 2.94.0."}], "lastModified": "2026-10-25T17:10:00.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:docling:docling:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "377FA7C9-DE83-4B22-A467-6D3B65BC887A", "versionEndExcluding": "2.94.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}