CVE-2026-112310: External Control of File Name or Path in docling-project docling-core
Description
docling-core versions up to 2.102.0 contain a local file disclosure vulnerability that allows attackers to read local image files by supplying filesystem paths in ImageRef URIs. This bypasses the allow_image_file_uri gate and can expose local images as base64-encoded data when exporting or rendering documents. The vulnerability has a medium severity with a CVSS score of 5.3.
CVSS v4.0
Score 5.3medium
Affected software
docling-project
docling-core
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-112310 affects docling-core through version 2.102.0. The vulnerability arises because attackers can supply plain filesystem paths in ImageRef URIs within crafted DoclingDocument JSON or YAML files. When these documents are exported with ImageRefMode.EMBEDDED or rendered to HTML, the system embeds the referenced local image files as base64-encoded data, effectively disclosing local files. This bypasses the intended allow_image_file_uri restriction designed to prevent such disclosures.
Potential Impact
An attacker can read local image files on the system where docling-core is running by embedding crafted document data. This can reveal the existence of local file paths and expose image content that should not be accessible. The vulnerability does not require privileges or authentication but does require user interaction (UI:P). The overall impact is confidentiality loss of local image files.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted DoclingDocument JSON or YAML inputs that include ImageRef URIs with filesystem paths. Consider restricting or sanitizing input to prevent embedding local file paths.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-19T14:14:29.771Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad63bfd2cdf04f65667d8bf
Added to database: 10/19/2026, 15:49:17 UTC
Last enriched: 10/19/2026, 16:03:48 UTC
Last updated: 10/19/2026, 16:03:48 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.