CVE-2026-105744 | docling-project Docling up to 2.131.x Tectonic Engine tectonic.py os command injection

October 5, 2026 Yanac

A vulnerability has been found in docling-project Docling up to 2.131.x and classified as critical. This impacts an unknown function of the file docling/backend/latex/engines/tectonic.py of the component Tectonic Engine. Performing a manipulation results in os command injection.

This vulnerability is cataloged as CVE-2026-105744. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More