Is CVE-2026-105750 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-105750 being exploited in the wild.

How severe is CVE-2026-105750?

Medium severity, with a CVSS score of 5.9, published 5 October 2026.

Which products and versions are affected?

Docling Project Docling 2.82.0 to 2.118.0; docling (PyPI) >= 2.82.0, = 2.92.0, < 2.118.1, ECOSYSTEM:introduced=2.92.0,fixed=2.118.1.

Is there a fix for CVE-2026-105750?

Yes. docling (PyPI): upgrade to 2.118.1 or later; docling-slim (PyPI): upgrade to 2.118.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-105750 attacked?

It is attacked over the network or with local access, in a software library.

Am I affected by CVE-2026-105750?

Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105750: Docling local file disclosure in HTML rendering

Q: Is there a fix for CVE-2026-105750?

Yes. docling (PyPI): upgrade to 2.118.1 or later; docling-slim (PyPI): upgrade to 2.118.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-105750 attacked?

It is attacked over the network or with local access, in a software library.

Q: Am I affected by CVE-2026-105750?

Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105750 · Severity: medium · CVSS 5.9 · Published 2026-10-05

Docling is a document processing library that converts various file formats for use with AI systems. A flaw in its HTML rendering feature allows attackers to read arbitrary local files from the server and embed them in rendered page images when processing specially crafted HTML files. This affects systems that enable HTML rendering with the render_page option and have the Playwright browser automation library installed.

Technologies: Docling Project Docling, docling (PyPI), docling-slim (PyPI). Vendors: Docling Project, PyPI.

Quick answers

Is CVE-2026-105750 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-105750 being exploited in the wild.
How severe is CVE-2026-105750?: Medium severity, with a CVSS score of 5.9, published 5 October 2026.
Which products and versions are affected?: Docling Project Docling 2.82.0 to 2.118.0; docling (PyPI) >= 2.82.0, < 2.118.1, ECOSYSTEM:introduced=2.82.0,fixed=2.118.1; docling-slim (PyPI) >= 2.92.0, < 2.118.1, ECOSYSTEM:introduced=2.92.0,fixed=2.118.1.
Is there a fix for CVE-2026-105750?: Yes. docling (PyPI): upgrade to 2.118.1 or later; docling-slim (PyPI): upgrade to 2.118.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-105750 attacked?: It is attacked over the network or with local access, in a software library.
Am I affected by CVE-2026-105750?: Check whether you run Docling Project Docling, docling (PyPI) or docling-slim (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

docling (PyPI): upgrade to 2.118.1 or later
```
pip install "docling>=2.118.1"
```
docling-slim (PyPI): upgrade to 2.118.1 or later
```
pip install "docling-slim>=2.118.1"
```

Technical details

The vulnerability exists in HTMLBackendOptions when render_page=True; the HTMLDocumentBackend._get_browser_request_block_reason method fails to enforce the enable_local_fetch setting or restrict local requests to the source document directory. An attacker can craft HTML files containing file:// URLs to arbitrary local files, which are fetched and rendered into page images by Playwright. The issue affects only filesystem Path inputs; stream inputs and non-rendering backends are unaffected.

Affected products

Docling Project Docling 2.82.0 to 2.118.0

Identifiers

CVE-2026-105750
GHSA-q43m-vhcp-mhvm
PYSEC-2026-4196
PYSEC-2026-4215

Timeline

2026-10-05: disclosed
2026-08-06: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.