CVE-2026-105747: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers() before enforcing the maxmembercount limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowedformats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
doclingto a version that resolves this vulnerability.Fixed in 2.131.0
Event History
Frequently Asked Questions
Which Docling versions are affected?
Docling versions from 2.45.0 through versions before 2.131.0 are affected. The issue is fixed in version 2.131.0.
What does an attacker need to exploit this issue?
An attacker needs to cause Docling to inspect a crafted gzip-compressed tar archive containing a very large number of empty members. No privileges are required, but processing the supplied archive requires user interaction.
Are deployments that restrict allowed document formats protected?
No. The archive members are enumerated during format detection before the allowed_formats restriction is applied, so format restrictions do not prevent this memory allocation path.
What should be done if upgrading is not immediately possible?
Do not rely on the configured member-count limit or allowed_formats setting to protect this path. Avoid processing untrusted gzip-compressed tar archives until Docling can be updated to 2.131.0.