{"data":{"id":"5ec03d24-c062-451b-8577-15dc864bcea5","title":"CVE-2026-44017: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","summary":"CVE-2026-44017 affects Docling before 2.91.0. Its EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip. An attacker who could compromise the model download source via supply chain attack, DNS spoofing, or MITM could write arbitrary files anywhere the process can write, potentially achieving remote code execution, persistent backdoors, or data corruption.","solution":"Fixed in 2.91.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44017","publishedAt":"2026-06-24T18:17:17.337Z","cveId":"CVE-2026-44017","cweIds":["CWE-22"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["docling@< 2.91.0 (fixed: 2.91.0)"],"affectedPackageNames":["docling"],"affectedPackageRefs":["pypi:docling"],"affectedVendors":[],"affectedVendorsRaw":["Docling","EasyOCR"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Docling zip slip in EasyOCR model download extraction","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00706,"epssCheckedAt":"2026-11-09T12:10:46.464Z","kevDateAdded":null,"advisoryAliases":["GHSA-cjqg-rq2h-2fvj"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:28.597Z","patchAvailable":true,"disclosureDate":"2026-06-24T18:17:17.337Z","fixReleasedAt":"2026-04-23T09:30:35.367Z","daysToFix":-62,"fixCheckedAt":"2026-10-29T21:33:49.225Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"docling","fixedVersion":"2.91.0","matchedVersion":"2.91.0","fixReleasedAt":"2026-04-23T09:30:35.367Z","daysToFix":-62,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:33:49.078Z"}]}}