CVE-2026-105746: CWE-668: Exposure of Resource to Wrong Sphere in docling-project docling

In docling versions >=2.83.0 and <2.131.0, the KServeV2OcrModel class sends page images to its configured OCR endpoint regardless of the pipeline_options.enable_remote_services setting. Additionally, the StandardPdfPipeline._make_ocr_model method does not pass this flag to the OCR factory, resulting in remote OCR processing occurring even when remote services are intended to be disabled. The destination endpoint is configured by the caller, not attacker-controlled. This behavior constitutes an exposure of resource to a wrong sphere (CWE-668). The vulnerability is resolved in version 2.131.0.

The vulnerability may cause page images to be sent to remote OCR services despite configuration policies disabling remote services. This could lead to unintended exposure of document content to external endpoints. However, the destination endpoint is caller-configured, limiting the scope of potential misuse. The CVSS score is low (2.2), indicating limited impact on confidentiality, integrity, and availability.

Upgrade docling to version 2.131.0 or later, where the issue is fixed. This update ensures that the enable_remote_services flag is respected and remote OCR processing is disabled when configured. No additional mitigations are indicated by the vendor advisory.