CVE-2026-105751 | docling-project Docling up to 2.120.2 OpenDocument Backend opendocument_backend.py _image_ref_from_odf_image enable_local_fetch path traversal

October 5, 2026 Yanac

A vulnerability classified as problematic has been found in docling-project Docling up to 2.120.2. This affects the function _image_ref_from_odf_image of the file docling/backend/opendocument_backend.py of the component OpenDocument Backend. This manipulation of the argument enable_local_fetch causes path traversal.

The identification of this vulnerability is CVE-2026-105751. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More