{"data":{"id":"6ca43485-821c-42b8-87a0-4d0cbf2863be","title":"CVE-2026-105744: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI…","summary":"Docling, a document processing library, versions 2.94.0 through 2.132.0 are affected when callers opt into LatexBackendOptions(tikz_engine=\"tectonic\"). The Tectonic engine in docling/backend/latex/engines/tectonic.py compiles untrusted TikZ and preamble input without restricting TeX file primitives such as \\openin and \\openout. Crafted input can read files available to the converter and create or overwrite writable files, and enabling tikz_engine_allow_shell_escape additionally permits shell commands. The default configuration is not affected.","solution":"Fixed in 2.132.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-105744","publishedAt":"2026-10-05T22:16:57.177Z","cveId":"CVE-2026-105744","cweIds":["CWE-22","CWE-73","CWE-1188"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["docling@>= 2.94.0, < 2.132.0 (fixed: 2.132.0)","docling-slim@>= 2.94.0, < 2.132.0 (fixed: 2.132.0)"],"affectedPackageNames":["docling","docling-slim"],"affectedVendors":[],"affectedVendorsRaw":["Docling"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Docling file read and write through TikZ rendering with Tectonic engine","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00344,"epssCheckedAt":"2026-10-10T06:41:59.205Z","kevDateAdded":null,"advisoryAliases":["GHSA-x3q2-h9hx-4r4j"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:42:55.079Z","patchAvailable":true,"disclosureDate":"2026-10-05T22:16:57.177Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}