CVE-2026-112310— docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
Quick assessment
Affected
docling-project docling-core
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Docling-core 2.102.0 及更早版本存在本地文件泄露漏洞。攻击者通过在 ImageRef URI 中提供普通文件系统路径，可绕过 防护机制，从而读取本地图像文件。攻击者可提交精心构造的 DoclingDocument JSON 或 YAML 文件；当这些文件以 模式导出或渲染为 HTML 时，会将可读的本地图像文件以 Base64 编码嵌入，进而暴露文件路径的存在性。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| docling-project | docling-core | ≤ 2.102.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112310
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
Source: CVE Program / CVE List V5
Vulnerability Description
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
文件名或路径的外部可控制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| docling-project | docling-core | 2.5.0 ~ 2.103.0 | - |
|
II. Public POCs for CVE-2026-112310
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112310
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-112310 (1)
Vendor Advisories for CVE-2026-112310 (1)
Vendor Pages for CVE-2026-112310 (1)
Other References for CVE-2026-112310 (3)
IV. Related Vulnerabilities
Same vendor: docling-project
-
CVE-2026-105751
Docling: Arbitrary local file read via draw:image xlink:href -
CVE-2026-105750
Docling: `enable_local_fetch` is not enforced in HTML browse -
CVE-2026-105749
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS -
CVE-2026-105748
Docling: Crafted DoclingDocument JSON embeds local image fil -
CVE-2026-105747
Docling: METS-GBS archive member limit enforced after full m
Same weakness: CWE-73
-
CVE-2026-111935
NoteGen through 0.38.3 Local File Disclosure via Chat Image -
CVE-2026-105037
EnergizeLab Station Middleware Authenticated Path Traversal -
CVE-2026-111234
SimplePie through 1.9.0 Local File Read via file:// Redirect -
CVE-2026-111230
Netgate pfSense CE through 2.9.0 Local File Read via Dynamic -
CVE-2026-54703
Markdown Preview Enhanced: Arbitrary File Write via updateMa
V. Comments for CVE-2026-112310
No comments yet