High severity · published Jun 26, 2026
CVE-2026-47214
Docling: Unsafe URI and Path Handling in HTML Backend
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
docling · docling-project
< 2.94.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-47214
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-47214
Patch
https://github.com/docling-project/docling/releases/tag/v2.94.0
Vendor Advisory
https://github.com/docling-project/docling/security/advisories/GHSA-q29v-xc37-wh5m
More from docling
8.8
CVE-2026-105744
Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
8.2
CVE-2026-44016
Docling: Unsafe Playwright-based HTML Rendering
7.8
CVE-2026-105745
Docling: Plugin entry points are imported before the allow_external_plugins check
7.5
CVE-2026-105751
Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
7.5
CVE-2026-105750
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode