CVE-2026-105745: CWE-696: Incorrect Behavior Order in docling-project docling

Docling versions >=2.27.0 and <2.131.0 have a flaw in plugin loading order where load_setuptools_entrypoints() is called before enforcing the allow_external_plugins setting. As a result, all modules registered under the Docling entry-point group are imported at startup, allowing potentially malicious third-party or compromised packages to execute code during import time. The namespace filter applied afterward incorrectly indicates that the plugin was not loaded, misleading users. This behavior is corrected in version 2.131.0.

An attacker can leverage this vulnerability by installing a malicious or compromised package registered as a Docling plugin. Even if external plugins are disabled, the malicious code executes during Docling startup, potentially leading to high confidentiality, integrity, and availability impacts as indicated by the CVSS score of 6.7. This could allow unauthorized code execution with limited privileges and user interaction required.

Upgrade Docling to version 2.131.0 or later where this issue is fixed. There is no indication that any temporary or alternative mitigations are available. Users should ensure they do not run vulnerable versions and avoid installing untrusted third-party packages as plugins.