CVE-2026-44022: Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands
Impact The LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences (e.g., ../../../etc/passwd) to: - Read arbitrary files from the file system accessible to the process - Include sensitive files in the converted document output - Potentially access configuration files, credentials, or other sensitive data
Patches Fixed in version 2.91.0. The fix implements strict path validation using Path.resolve().isrelativeto() to ensure all resolved paths remain within the base document directory. Attempts to traverse outside the base directory are logged and blocked.
Workarounds Avoid processing untrusted LaTeX documents. If processing is necessary, run in a sandboxed environment with restricted file system access.
References - Fix release: v2.91.0
Other sources
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences to read arbitrary files from the file system accessible to the process, include sensitive files in the converted document output, or potentially access configuration files, credentials, or other sensitive data This vulnerability is fixed in 2.91.0.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/doclingto a version that resolves this vulnerability.Fixed in 2.91.0 - Upgrade
Upgrade
doclingto a version that resolves this vulnerability.Fixed in 2.91.0 - Compensating control
If you must process LaTeX documents, run Docling in a sandboxed environment with restricted file system access.
- Compensating control
Avoid processing untrusted LaTeX documents.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44022?
The severity of CVE-2026-44022 is classified as medium with a score of 5.5.
What is CVE-2026-44022?
CVE-2026-44022 is a vulnerability in the LaTeX backend's handling of certain commands that allows for path traversal, potentially enabling attackers to read arbitrary files.
How do I fix CVE-2026-44022?
To fix CVE-2026-44022, update to the latest version of the software that addresses this vulnerability.
What software is affected by CVE-2026-44022?
CVE-2026-44022 affects the pip/docling software, specifically within its LaTeX backend.
What can attackers achieve with CVE-2026-44022?
Attackers can exploit CVE-2026-44022 to craft malicious LaTeX documents that can read arbitrary files from the file system.