CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
Attackers can read local image files by supplying plain filesystem paths in ImageRef URIs within crafted documents, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-112310?
CVE-2026-112310 is a medium-severity path traversal vulnerability in docling-project docling-core, published on 19 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.
Weakness: CWE-73
Which versions are affected by CVE-2026-112310?
How do I fix CVE-2026-112310?
No fix has been published for CVE-2026-112310 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-112310 being exploited?
There is no known exploitation of CVE-2026-112310 in the wild and no public exploit code.
Sources
Also known as GHSA-jx5c-6gmw-72m3.