Riskcovery

CVE-2026-105742

Docling: Configured HTTP headers sent to every remote image host named by a document

State
Published
Severity
3.7 Low
Published
Oct 5, 2026
Updated
Oct 6, 2026
Reserved
Oct 5, 2026

Read the record on cve.org

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when enable_remote_fetch=True and fetch_images=True. The loader does not restrict those credentials to the source document's origin, allowing requests that carry custom headers such as API keys and cookies to follow cross-origin redirects and expose the caller's configured credentials to a document author. The default configuration is not affected because remote fetching and configured headers are required. This issue is fixed in 2.132.0.

Scores

CVSSScoreVectorSource
3.13.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NGitHub_M

Weaknesses

  • CWE-201 Insertion of Sensitive Information Into Sent Data
  • CWE-522 Insufficiently Protected Credentials

Affected Products

ProductVersions
doclingdocling-project
  • >= 2.95.0, < 2.132.0Affected
docling-slimdocling-project
  • >= 2.95.0, < 2.132.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.