# CVE-2026-105742: Docling: Configured HTTP headers sent to every remote image host named by a document

Source: https://junglewise.ai/threats/cve-2026-105742-docling-simplifies-document-processing-by-parsing-diverse  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-05  
License: CC BY 4.0 with a link back

CVE-2026-105742 · Severity: low · CVSS 3.7 · Published 2026-10-05

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/image_resource_loader.py forwards headers configured through the HTMLBackendOptions.headers setting to every remote image URL named by an untrusted document when enable_remote_fetch=True and fetch_images=True. The loader does not restrict those credentials to the source document's origin, allowing requests that carry custom headers such as API keys and cookies to follow cross-origin redirects and expose the caller's configured credentials to a document author. The default configuration is not affected because remote fetching and configured headers are required. This issue is fixed in 2.132.0.

Technologies: [docling (PyPI)](https://junglewise.ai/threats/technologies/pypi-docling), [docling-slim (PyPI)](https://junglewise.ai/threats/technologies/docling-slim). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-105742 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105742 being exploited in the wild.

**How severe is CVE-2026-105742?** Low severity, with a CVSS score of 3.7, published 5 October 2026.

**Which products and versions are affected?** docling (PyPI) >= 2.95.0, < 2.132.0, ECOSYSTEM:introduced=2.95.0,fixed=2.132.0; docling-slim (PyPI) >= 2.95.0, < 2.132.0, ECOSYSTEM:introduced=2.95.0,fixed=2.132.0.

**Is there a fix for CVE-2026-105742?** Yes. docling (PyPI): upgrade to 2.132.0 or later; docling-slim (PyPI): upgrade to 2.132.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected by CVE-2026-105742?** Check whether you run docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- docling (PyPI): upgrade to 2.132.0 or later

  ```sh
  pip install "docling>=2.132.0"
  ```

- docling-slim (PyPI): upgrade to 2.132.0 or later

  ```sh
  pip install "docling-slim>=2.132.0"
  ```


## Affected products

- docling (PyPI) >= 2.95.0, < 2.132.0, ECOSYSTEM:introduced=2.95.0,fixed=2.132.0
- docling-slim (PyPI) >= 2.95.0, < 2.132.0, ECOSYSTEM:introduced=2.95.0,fixed=2.132.0

## Identifiers

- CVE-2026-105742
- GHSA-p3fw-7699-7926
- PYSEC-2026-4189
- PYSEC-2026-4212

## Related threats

- [Docling METS-GBS archive member limit enforced after full enumeration](https://junglewise.ai/threats/duplicate-advisory-docling-mets-gbs-archive-member-limit-enforced-after-087423a8)
- [Docling arbitrary filesystem read via unvalidated xlink:href in ODF images](https://junglewise.ai/threats/cve-2026-105751-docling-simplifies-document-processing-by-parsing-diverse)
- [Docling local file disclosure in HTML rendering](https://junglewise.ai/threats/cve-2026-105750-docling-simplifies-document-processing-by-parsing-diverse)
- [Docling unbounded table span allocation denial of service](https://junglewise.ai/threats/cve-2026-105749-docling-simplifies-document-processing-by-parsing-diverse)
- [IBM Docling arbitrary local file read via JSON backend](https://junglewise.ai/threats/cve-2026-105748-docling-simplifies-document-processing-by-parsing-diverse)