CVE-2026-44018 Details
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.
A vulnerability exists in Docling versions 2.45.0 prior to 2.91.0 within the METS-GBS backend. The issue arises from inadequate security controls in XML parsing and document format detection, allowing attackers to create malicious METS-GBS archives. When these archives are processed, they can read sensitive files, deplete system resources, or cause the application to crash. This vulnerability is linked to XML External Entity (XXE) attacks, which can read local files or lead to denial-of-service conditions. Additionally, the lack of proper validation allows for the extraction of unbounded archives, consuming excessive system resources.
Users can upgrade to Docling version 2.91.0, which addresses this vulnerability by implementing secure XML parsing, configurable extraction limits, and a method for safe format detection of METS-GBS tar archives. If an immediate upgrade is not possible, avoid processing METS-GBS archives from untrusted sources and consider pre-validating them in an isolated environment with resource limits.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/docling-project/docling/releases/tag/v2.91.0 | [email protected] | Release Notes |
| https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) | [email protected] |
| CWE-611 | Improper Restriction of XML External Entity Reference | [email protected] |
| CWE-776 | Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| docling docling | >= 2.45.0, < 2.91.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 27, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | CVE Modified | CISA-ADP |
| Jun 26, 2026 | New CVE Received | [email protected] |