CVE-2026-44018: Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend
Vulnerability summary
CVE-2026-44018 is a high (CVSS 7.1) vulnerability in docling-project docling. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.3% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 26-06-2026PublishedVulnerability first disclosed.
- 26-06-2026Last modifiedVulnerability information updated.
Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS archives that, when processed, could read sensitive files, exhaust system resources, or cause application crashes. This vulnerability is fixed in 2.91.0.
CVSS metrics
3 scores · 3 sources · 1 version- CVE.orgCNA5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
- OSV · PypiEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.16% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-409Improper Handling of Highly Compressed Data (Data Amplification)The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
- CWE-611Improper Restriction of XML External Entity ReferenceThe product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
- CWE-776Improper Restriction of Recursive Entity References in DTDsThe product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
Affected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Docling1 product
- docling≥ 2.45.0, < 2.91.0
Docling-project1 product
- docling≥ 2.45.0, < 2.91.0
PyPI1 product
- docling≥ 2.45.0, < 2.91.0
3 vendors · 3 products
References
5 links- github.com/docling-project/docling/security/advisories/GHSA-r3xg-rg9j-67fvX Refsource CONFIRMWEBFIXPatchVendor Advisory
