The vulnerability in Docling's JATS XML backend arises from the use of etree.parse() without disabling entity resolution, allowing XML Entity Expansion (XXE) attacks. Specifically, an attacker can craft a malicious XML file containing nested entity expansions that exponentially consume system resources when parsed, leading to a denial of service condition. This affects versions through 2.61.0. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and impact limited to availability (DoS). No patch or official remediation level has been disclosed.

Successful exploitation results in denial of service due to resource exhaustion on the system running the Docling XML parser. There is no reported impact on confidentiality or integrity. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating the risk by disabling entity resolution in XML parsing if possible or using external XML parsing libraries that safely handle entity expansion. Monitoring for unusually high resource consumption during XML processing may help detect exploitation attempts.