CVE-2026-112310 Details

A local file disclosure vulnerability exists in Docling-Core versions 2.5.0 prior to 2.103.0. This vulnerability allows attackers to read local image files by providing plain filesystem paths in ImageRef URIs, bypassing the default gate that restricts such access. The issue arises because the application does not properly validate these paths in documents from untrusted sources. When exported with embedded images or rendered to HTML, the local files are converted to base64 and included in the output, revealing both the file content and the existence of the file path.

Users can upgrade to Docling-Core version 2.103.0 or later, where this vulnerability has been fixed. In version 2.103.0, all local image reads now require an explicit opt-in, either globally or per document.