CVE-2026-44018

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-44018", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-04T21:24:36.506Z", "datePublished": "2026-06-26T15:40:42.422Z", "dateUpdated": "2026-06-26T19:13:39.619Z"}, "containers": {"cna": {"title": "Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend", "problemTypes": [{"descriptions": [{"cweId": "CWE-409", "lang": "en", "description": "CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-611", "lang": "en", "description": "CWE-611: Improper Restriction of XML External Entity Reference", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-776", "lang": "en", "description": "CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv"}, {"name": "https://github.com/docling-project/docling/releases/tag/v2.91.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/docling-project/docling/releases/tag/v2.91.0"}], "affected": [{"vendor": "docling-project", "product": "docling", "versions": [{"version": ">= 2.45.0, < 2.91.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-26T15:40:42.422Z"}, "descriptions": [{"lang": "en", "value": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0."}], "source": {"advisory": "GHSA-r3xg-rg9j-67fv", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-26T19:10:31.944583Z", "id": "CVE-2026-44018", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T19:13:39.619Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-44018", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T19:10:31.944583Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T19:10:35.512Z"}}], "cna": {"title": "Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend", "source": {"advisory": "GHSA-r3xg-rg9j-67fv", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "docling-project", "product": "docling", "versions": [{"status": "affected", "version": ">= 2.45.0, < 2.91.0"}]}], "references": [{"url": "https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv", "name": "https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/docling-project/docling/releases/tag/v2.91.0", "name": "https://github.com/docling-project/docling/releases/tag/v2.91.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-409", "description": "CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-611", "description": "CWE-611: Improper Restriction of XML External Entity Reference"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-776", "description": "CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-26T15:40:42.422Z"}}}, "cveMetadata": {"cveId": "CVE-2026-44018", "state": "PUBLISHED", "dateUpdated": "2026-06-26T19:13:39.619Z", "dateReserved": "2026-05-04T21:24:36.506Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-26T15:40:42.422Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "docling", "vendor": "docling-project", "versions": [{"status": "affected", "version": ">= 2.45.0, < 2.91.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:docling:docling:*:*:*:*:*:python:*:*", "matchCriteriaId": "7C6BE533-9362-43F1-A3DA-FF2856BF580F", "versionEndExcluding": "2.91.0", "versionStartIncluding": "2.45.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0."}, {"lang": "es", "value": "Docling simplifica el procesamiento de documentos al analizar diversos formatos y al proporcionar integraciones con el ecosistema de IA generativa. Desde la versi\u00f3n 2.45.0 hasta la 2.91.0, el an\u00e1lisis XML del backend de METS-GBS y la detecci\u00f3n del formato del documento de entrada carec\u00edan de controles de seguridad. Un atacante podr\u00eda crear archivos METS-GBS maliciosos que, al ser procesados, podr\u00edan leer archivos sensibles, agotar los recursos del sistema o provocar ca\u00eddas de la aplicaci\u00f3n. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 2.91.0."}], "id": "CVE-2026-44018", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44018", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-26T19:10:31.944583Z", "version": "2.0.3"}}]}, "published": "2026-06-26T16:16:30.767", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/docling-project/docling/releases/tag/v2.91.0"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-409"}, {"lang": "en", "value": "CWE-611"}, {"lang": "en", "value": "CWE-776"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "docling: Docling: Denial of Service via crafted document archives", "id": "2493607", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493607"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-611", "details": ["Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.", "A flaw was found in Docling, a tool for document processing. The METS-GBS backend, responsible for parsing XML and detecting document formats, lacked sufficient security controls. This allowed an attacker to create specially crafted METS-GBS archives. When these archives were processed, they could lead to the exhaustion of system resources or cause the application to crash, resulting in a Denial of Service (DoS). Additionally, this vulnerability could also enable the disclosure of sensitive files."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, avoid processing METS-GBS archives from untrusted or unverified sources. If processing such archives is unavoidable, ensure they are pre-validated within an isolated environment with strict resource limits to prevent resource exhaustion and unauthorized file access."}, "name": "CVE-2026-44018", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-autorag-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-06-26T15:40:42Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-44018\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44018\nhttps://github.com/docling-project/docling/releases/tag/v2.91.0\nhttps://github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fv"], "statement": "The vulnerability in Docling, rated Moderate, allows for sensitive file disclosure and denial of service within Red Hat OpenShift AI when processing untrusted METS-GBS archives. This is due to insufficient security controls in the XML parsing and document format detection, which an attacker could exploit using crafted archives to trigger XML External Entity (XXE) attacks or decompression bombs.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.45.0,2.91.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "docling", "source": "cna", "vendor": "docling-project"}, "product": "docling", "vendor": "docling-project"}], "created": "2026-06-26T17:45:03.936107+00:00", "updated": "2026-06-26T22:45:05.691219+00:00", "vendors": ["docling-project", "docling-project$PRODUCT$docling"]}