CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

Docling

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ body and document preamble without restricting TeX file primitives including \openin and \openout. Crafted input can read files available to the converter and create or overwrite…

6. Okt 2026

Ausgewertete Quellen

• NVD
  CVE-2026-105744
• GitHub
  https://github.com/docling-project/docling/security/advisories/GHSA-x3q2-h9hx-4r4j