Docling-core, a core component of the Docling document processing application, in versions 1.5.0 through 2.74.0, insufficiently restricts remote request destinations. Specifically, it can resolve a server-provided Content-Disposition header to a local path in an unsafe manner. This improper limitation of a pathname to a restricted directory (CWE-22) can be exploited in applications that accept untrusted URLs to perform SSRF attacks targeting local files outside the user-defined cache directory. The issue is addressed in version 2.74.1.

An attacker can exploit this vulnerability to perform server-side request forgery (SSRF) attacks that access local files outside the intended cache directory, potentially leading to disclosure of sensitive information (high confidentiality impact), limited integrity impact, and limited availability impact. The CVSS score of 8.6 reflects a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Upgrade docling-core to version 2.74.1 or later, where this vulnerability has been fixed. Patch status is confirmed by the vendor advisory indicating the fix in 2.74.1. No other mitigations are specified or required once the upgrade is applied.