CVE-2026-44023: Docling Core has unsafe remote filename resolution
Impact In versions >= 1.5.0, < 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner.
In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory.
Patches Patched in docling-core 2.74.1. The fix adds stricter validation for remote destinations and normalizes server-provided filenames before use.
Users should upgrade to: - docling-core >= 2.74.1
Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality.
References - Fix release: v2.74.1
Other sources
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/docling-coreto a version that resolves this vulnerability.Fixed in 2.74.1 - Upgrade
Upgrade
docling-coreto a version that resolves this vulnerability.Fixed in 2.74.1 - Compensating control
If you cannot upgrade immediately, avoid passing untrusted URLs into the remote fetch functionality in applications using docling-core; this reduces SSRF risk that could target local files outside the user-defined cache directory.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44023?
The severity of CVE-2026-44023 is rated as high with a score of 8.6.
How do I fix CVE-2026-44023?
To fix CVE-2026-44023, upgrade to docling-core version 2.74.1 or later.
What types of attacks are associated with CVE-2026-44023?
CVE-2026-44023 is associated with Server-Side Request Forgery (SSRF) attacks due to improper handling of URLs.
In which versions of docling-core is CVE-2026-44023 present?
CVE-2026-44023 is present in docling-core versions from 1.5.0 to less than 2.74.1.
What impact does CVE-2026-44023 have on applications?
CVE-2026-44023 can potentially allow untrusted URL inputs to perform path traversal and SSRF attacks.