MediumVulnerability
CVE-2026-44022: Docling LaTeX backend path traversal via includegraphics, input and include
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-44022
- Published
- Record updated
- Affected
- docling >= 2.73.0, < 2.91.0
- Fixed in
- 2.91.0
- released April 23, 2026, 62 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-44022 affects Docling from 2.73.0 through 2.91.0. The LaTeX backend handles \includegraphics, \input, and \include commands without path containment validation. A crafted LaTeX document with path traversal sequences could read arbitrary files accessible to the process and include them in the converted output.
Mitigation
Fixed in 2.91.0.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- doclingPyPINo LLM dependency detected · 9 tracked dependents
Related items
- MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
- MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News
- HighCVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authorsSimilar attack · NVD/CVE Database
- MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News