CVE-2026-105742
From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when…
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when enable_remote_fetch=True and fetch_images=True. The loader does not restrict those credentials to the source document's origin, allowing requests that carry custom headers such as API keys and cookies to follow cross-origin redirects and expose the caller's configured credentials to a document author. The default configuration is not affected because remote fetching and configured headers are required. This issue is fixed in 2.132.0.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.25% probability · 17th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-201, CWE-522
- Affected
- docling/docling
- Source
- security-advisories@github.com
EPSS moved from 0.2% on 6 October 2026 to 0.3% on 27 October 2026.
References
- https://github.com/docling-project/docling/commit/5e469137f275ffc443306a30d12a3a45bceb80fbPatch
- https://github.com/docling-project/docling/pull/4420Issue Tracking, Patch
- https://github.com/docling-project/docling/releases/tag/v2.132.0Release Notes
- https://github.com/docling-project/docling/security/advisories/GHSA-p3fw-7699-7926Exploit, Patch, Vendor Advisory
- https://github.com/docling-project/docling/security/advisories/GHSA-p3fw-7699-7926Exploit, Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.