Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-105745— Docling: Plugin entry points are imported before the allow_external_plugins check

Quick assessment

Affected
docling-project docling
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Docling 通过解析多种文档格式并与生成式 AI 生态系统集成，简化了文档处理流程。在版本 2.27.0 至 2.131.0 之间，Docling 的插件工厂（位于 docling/models/factories/base_factory.py）在应用 配置之前，会调用 。这导致即使外部插件功能被禁用，所有注册在 Docling entry-point 组中的模块仍会被导入。因此，当 Docling 启动时，任何已安装的第三方包或遭受恶意篡改的包都可以执行其导入时（import-time）的代码。而随后，命名

CVSS 6.7 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-105745

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Docling: Plugin entry points are imported before the allow_external_plugins check
Source: CVE Program / CVE List V5
Vulnerability Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setuptools_entrypoints() before applying the allow_external_plugins setting, so every module registered in the Docling entry-point group is imported even when external plugins are disabled. An installed third-party or compromised package can therefore execute import-time code when Docling starts, while the subsequent namespace filter misleadingly reports that the plugin was not loaded. This issue is fixed in 2.131.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不正确的行为次序
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
docling-project docling >= 2.27.0, < 2.131.0 -
docling-project docling-slim >= 2.27.0, < 2.131.0 -

II. Public POCs for CVE-2026-105745

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-105745

请登录查看更多情报信息。

Other References for CVE-2026-105745 (4)

Same Patch Batch · docling-project · 2026-10-05 · 10 CVEs total

CVE-2026-105744 7.5 HIGH Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) wh
CVE-2026-105751 6.9 MEDIUM Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
CVE-2026-105749 6.5 MEDIUM Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CP
CVE-2026-105750 5.9 MEDIUM Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
CVE-2026-105748 4.3 MEDIUM Docling: Crafted DoclingDocument JSON embeds local image files into converted output
CVE-2026-105747 4.3 MEDIUM Docling: METS-GBS archive member limit enforced after full member enumeration (memory exha
CVE-2026-105743 4.0 MEDIUM Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resol
CVE-2026-105742 3.7 LOW Docling: Configured HTTP headers sent to every remote image host named by a document
CVE-2026-105746 2.2 LOW Docling: KServe v2 OCR engine does not enforce enable_remote_services

IV. Related Vulnerabilities

Same product: docling
Same vendor: docling-project
Same weakness: CWE-696

V. Comments for CVE-2026-105745

No comments yet

Leave a comment