CVE-2026-44016
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In Docling versions 2.82.0 through 2.90.0, if the HTML backend was explicitly configured for rendering (disabled by default), the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services.
Risk Assessment
The risk includes SSRF attacks, data exfiltration, or remote code execution in the rendering environment, potentially compromising system confidentiality and integrity.
Recommendation
Immediately upgrade Docling to version 2.91.0 or later, which contains the fix for this vulnerability.
Other vulnerabilities in Docling
See all- CVE-2026-47214High
In Docling prior to version 2.94.0, unsafe URI and path handling was found in the HTML backend. This vulnerability could allow an attacker to perform unauthorized operations on files or network resources.
- CVE-2026-44020High
A vulnerability in Docling library versions 2.13.0 through 2.74.0 allows XML External Entity (XXE) attacks via parsing malicious USPTO patent XML files. An attacker can read arbitrary files from the server, perform SSRF attacks, or cause denial of service through entity expansion.
- CVE-2026-44017High
A vulnerability in Docling before version 2.91.0 allows Zip Slip attacks during EasyOCR model downloads. An attacker can overwrite arbitrary files, leading to remote code execution, persistent backdoors, or data corruption.
Original NVD description (English source)
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML backend was explicitly configured for rendering (rendering option by default deactivated), then the Playwright-based rendering feature could allow JavaScript execution and unrestricted network access when processing untrusted HTML documents. An attacker could craft malicious HTML that executes arbitrary JavaScript in the rendering context or makes unauthorized network requests to internal services, potentially leading to SSRF attacks, data exfiltration, or remote code execution in the rendering environment. This vulnerability is fixed in 2.91.0.