CVE-2026-108749

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-108749", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-10-11T01:53:24.755Z", "datePublished": "2026-10-11T12:19:49.965Z", "dateUpdated": "2026-10-16T11:32:14.374Z", "dateRejected": "2026-10-16T11:32:14.374Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-16T11:32:14.374Z"}, "rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-108749", "lastModified": "2026-10-18T22:10:00.100", "metrics": {}, "published": "2026-10-11T13:17:19.670", "references": [], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "docling-serve: docling-serve: Information disclosure via missing authentication on memory endpoints", "id": "2549241", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2549241"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.7", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-306", "details": ["A flaw was found in docling-serve. An unauthenticated remote attacker can access sensitive process memory metrics and trigger internal garbage collection routines by querying memory monitoring endpoints that fail to enforce authentication controls. Successful exploitation allows an attacker to bypass configured Application Programming Interface (API) key restrictions and obtain internal system telemetry."], "name": "CVE-2026-108749", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Fix deferred", "package_name": "rhai-early-access/docling-serve-cuda-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-10-11T12:19:49Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-108749\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-108749\nhttps://github.com/docling-project/docling-serve\nhttps://github.com/docling-project/docling-serve/blob/07b1d3d3b515afd9196148e0353d54ea38de2a37/docling_serve/app.py#L1631-L1687\nhttps://github.com/docling-project/docling-serve/blob/07b1d3d3b515afd9196148e0353d54ea38de2a37/docling_serve/auth.py#L49-L55\nhttps://hackmd.io/@haind03/docling-serve-memory-endpoints-api-key-bypass\nhttps://www.vulncheck.com/advisories/docling-serve-1.14.0-through-1.36.0-missing-authentication-via-memory-management-endpoints"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.14.0,1.36.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "docling-serve", "vendor": "docling-project"}], "created": "2026-10-11T14:00:18.681449+00:00", "updated": "2026-10-13T07:58:06.321250+00:00", "vendors": ["docling-project", "docling-project$PRODUCT$docling-serve"]}