CVE-2026-44520 Details
Description
Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in docling_graph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no IP-level validation. Additionally, requests.head() was called with allow_redirects=True, allowing an attacker to redirect requests to internal endpoints via an intermediary URL. An attacker who can control the --source CLI argument or PipelineConfig.source API parameter can trigger Server-Side Request Forgery (SSRF). This vulnerability is fixed in 1.5.1.
A Server-Side Request Forgery (SSRF) vulnerability has been identified in Docling-Graph versions prior to 1.5.1. The issue arises in the URLInputHandler class, which makes HTTP requests to user-supplied URLs without verifying if the target IP address is private, loopback, or link-local. The URLValidator only ensures a valid scheme and non-empty netloc, lacking any IP-level checks. Furthermore, requests.head() was executed with allow_redirects=True, enabling attackers to redirect requests to internal endpoints through an intermediary URL. This vulnerability can be exploited by manipulating the --source CLI argument or the PipelineConfig.source API parameter, potentially leading to unauthorized access to cloud metadata endpoints or internal services on loopback or private network ranges.
Users are advised to upgrade to Docling-Graph version 1.5.1 or later. The patch includes IP validation to block private, loopback, link-local, and reserved addresses, and disables automatic redirection of requests, allowing for explicit validation of any redirected URLs. If an immediate upgrade is not possible, ensure that all URLs provided to the URLInputHandler are from trusted internal sources.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 14, 2026CISA-ADP
Assessed May 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/docling-project/docling-graph/security/advisories/GHSA-fqph-j6v6-jvgx | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Docling-Graph | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 14, 2026 | New CVE Received | [email protected] |