CVE-2026-44520: Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler
Vulnerability summary
CVE-2026-44520 is a medium (CVSS 5.7) URL Redirection to Untrusted Site vulnerability in docling-project docling-graph. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.4% of scored vulnerabilities.
Not severe (CVSS 5.7, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 14-05-2026PublishedVulnerability first disclosed.
- 14-05-2026Last modifiedVulnerability information updated.
Description
Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in docling_graph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no IP-level validation. Additionally, requests.head() was called with allow_redirects=True, allowing an attacker to redirect requests to internal endpoints via an intermediary URL. An attacker who can control the --source CLI argument or PipelineConfig.source API parameter can trigger Server-Side Request Forgery (SSRF). This vulnerability is fixed in 1.5.1.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · PypiEcosystem advisory · calculated5.7MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
- NVDNIST5.7MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
8%
Versus all other CVEs
30-day change
Decrease -0.12 pp
From 0.31% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-601URL Redirection to Untrusted SiteThe web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
- CWE-918Server-Side Request ForgeryThe web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Affected systems
Known conditions: network-reachable, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
Docling-project1 product
- docling-graph< 1.5.1
PyPI1 product
- docling-graph< 1.5.1
2 vendors · 2 products
References
6 links- github.com/docling-project/docling-graph/security/advisories/GHSA-fqph-j6v6-jvgxX Refsource CONFIRMWEB
