High severity · published Jun 26, 2026
CVE-2026-44018
Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
docling · docling-project
>= 2.45.0, < 2.91.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44018
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44018
Release Notes
https://github.com/docling-project/docling/releases/tag/v2.91.0
Patch
https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv
More from docling
8.8
CVE-2026-105744
Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
8.2
CVE-2026-44016
Docling: Unsafe Playwright-based HTML Rendering
7.8
CVE-2026-105745
Docling: Plugin entry points are imported before the allow_external_plugins check
7.5
CVE-2026-105751
Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
7.5
CVE-2026-105750
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode