CVE-2026-44019 Docling Core has insufficient validation of image reference URIs
Attackers can access local files or cause denial of service via malicious image references in Docling Core applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-44019?
CVE-2026-44019 is a high-severity path traversal vulnerability in docling-project docling-core, published on 16 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads. This issue has been fixed in version 2.74.1.
Which versions are affected by CVE-2026-44019?
3 open source packages ship an affected version, including docling-core.
| Package | Affected | Fixed in |
|---|---|---|
docling-core PyPI | From 2.5.0 | 2.74.1 |
docling-core PyPI | From 2.5.0 | 2.74.1 |
docling-core PyPI | From 2.5.0 | 2.74.1 |
How do I fix CVE-2026-44019?
Upgrade docling-core to 2.74.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-44019 being exploited?
There is no known exploitation of CVE-2026-44019 in the wild and no public exploit code.
Sources
Also known as GHSA-j5xp-7m2f-49jv, PYSEC-2026-2456.