Is CVE-2026-105745 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-105745 being exploited in the wild.

How severe is CVE-2026-105745?

Medium severity, with a CVSS score of 6.7, published 5 October 2026.

Which products and versions are affected?

Docling Project Docling 2.27.0 until 2.131.0; docling (PyPI) >= 2.27.0, = 2.92.0, < 2.131.0, ECOSYSTEM:introduced=2.92.0,fixed=2.131.0.

Is there a fix for CVE-2026-105745?

Yes. docling (PyPI): upgrade to 2.131.0 or later; docling-slim (PyPI): upgrade to 2.131.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-105745 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-105745?

Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105745: Docling plugin loader arbitrary code execution via compromised entrypoints

Q: Is there a fix for CVE-2026-105745?

Yes. docling (PyPI): upgrade to 2.131.0 or later; docling-slim (PyPI): upgrade to 2.131.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-105745 attacked?

It is attacked with local access, in a software library.

Q: Am I affected by CVE-2026-105745?

Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105745 · Severity: medium · CVSS 6.7 · Published 2026-10-05

Docling is a document processing library that parses various file formats and integrates with AI systems. A vulnerability in versions 2.27.0 to 2.131.0 allows installed third-party or compromised packages to execute arbitrary code when Docling starts, even when external plugins are supposed to be disabled, because the entrypoint loader imports modules before the plugin restriction filter is applied.

Technologies: Docling Project Docling, docling (PyPI), docling-slim (PyPI). Vendors: Docling Project, PyPI.

Quick answers

Is CVE-2026-105745 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-105745 being exploited in the wild.
How severe is CVE-2026-105745?: Medium severity, with a CVSS score of 6.7, published 5 October 2026.
Which products and versions are affected?: Docling Project Docling 2.27.0 until 2.131.0; docling (PyPI) >= 2.27.0, < 2.131.0, ECOSYSTEM:introduced=2.27.0,fixed=2.131.0; docling-slim (PyPI) >= 2.92.0, < 2.131.0, ECOSYSTEM:introduced=2.92.0,fixed=2.131.0.
Is there a fix for CVE-2026-105745?: Yes. docling (PyPI): upgrade to 2.131.0 or later; docling-slim (PyPI): upgrade to 2.131.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-105745 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-105745?: Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

docling (PyPI): upgrade to 2.131.0 or later
```
pip install "docling>=2.131.0"
```
docling-slim (PyPI): upgrade to 2.131.0 or later
```
pip install "docling-slim>=2.131.0"
```

Technical details

The plugin factory in base_factory.py calls load_setuptools_entrypoints() before checking the allow_external_plugins setting, causing all modules registered in the Docling entry-point group to be imported at startup regardless of configuration. An attacker who can install a malicious package in the Python environment can execute arbitrary code at import time, which runs before the namespace filter can prevent the plugin from being recognized. The vulnerability requires local package installation capability but affects all users of Docling with that compromised dependency.

Affected products

Docling Project Docling 2.27.0 until 2.131.0

Identifiers

CVE-2026-105745
GHSA-9jxx-vjrv-h2rq
PYSEC-2026-4192
PYSEC-2026-4210

Timeline

2026-10-05: disclosed
2026-09-29: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.