CVE-2026-105744

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-105744
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105744.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-105744
Aliases
  • GHSA-x3q2-h9hx-4r4j
Published
2026-10-05T21:26:56Z
Modified
2026-10-07T02:47:27Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Details

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ body and document preamble without restricting TeX file primitives including \openin and \openout. Crafted input can read files available to the converter and create or overwrite writable files, and enabling the tikz_engine_allow_shell_escape option additionally permits shell commands through TeX. The default configuration, which does not enable Tectonic rendering, is not affected. This vulnerability is fixed in 2.132.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1188",
        "CWE-22",
        "CWE-73"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105744.json"
}
References

Affected packages

Git / github.com/docling-project/docling

Affected ranges

Type
GIT
Repo
https://github.com/docling-project/docling
Events
Introduced
9816f85228a6d3d34cc4beaec0ee7356c7d0bf43
Fixed
38b6fa0a465d46fdacbbec333f50fa19c4f6b342
Fixed
5c349dd696d81c67fe29c378a4fdff08e28090bd
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "2.94.0"
        },
        {
            "fixed": "2.132.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.100.0
v2.101.0
v2.102.0
v2.102.1
v2.102.2
v2.103.0
v2.104.0
v2.105.0
v2.106.0
v2.107.0
v2.108.0
v2.109.0
v2.110.0
v2.111.0
v2.112.0
v2.113.0
v2.114.0
v2.115.0
v2.116.0
v2.117.0
v2.118.0
v2.118.1
v2.119.0
v2.120.0
v2.120.1
v2.120.2
v2.120.3
v2.121.0
v2.122.0
v2.123.0
v2.123.1
v2.124.0
v2.125.0
v2.126.0
v2.127.0
v2.128.0
v2.129.0
v2.130.0
v2.131.0
v2.94.0
v2.95.0
v2.96.0
v2.96.1
v2.97.0
v2.98.0
v2.99.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105744.json"