{"id":"CVE-2026-44022","aliases":["GHSA-2j5p-7p5m-cvqr","PYSEC-2026-2145"],"title":"Docling: Potential Path Traversal via LaTeX \\includegraphics and \\input Commands","summary":"Docling: Potential Path Traversal via LaTeX \\includegraphics and \\input Commands","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","vendor":"docling","product":"docling","ecosystem":"pip","affected":["docling >= 2.73.0, < 2.91.0"],"patched":["docling 2.91.0"],"published":"2026-06-03","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-2j5p-7p5m-cvqr","references":[{"url":"https://github.com/docling-project/docling/security/advisories/GHSA-2j5p-7p5m-cvqr"},{"url":"https://github.com/docling-project/docling"},{"url":"https://github.com/docling-project/docling/releases/tag/v2.91.0"}],"tags":["osv","pip"],"epss":0.00207,"epssPercentile":0.11144,"ingestedAt":"2026-07-13T18:57:51.339Z","slug":"CVE-2026-44022","body":"## Overview\n\n### Impact\nThe LaTeX backend's handling of `\\includegraphics`, `\\input`, and `\\include` commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences (e.g., `../../../etc/passwd`) to:\n- Read arbitrary files from the file system accessible to the process\n- Include sensitive files in the converted document output\n- Potentially access configuration files, credentials, or other sensitive data\n\n### Patches\nFixed in version 2.91.0. The fix implements strict path validation using `Path.resolve().is_relative_to()` to ensure all resolved paths remain within the base document directory. Attempts to traverse outside the base directory are logged and blocked.\n\n### Workarounds\nAvoid processing untrusted LaTeX documents. If processing is necessary, run in a sandboxed environment with restricted file system access.\n\n### References\n- Fix release: [v2.91.0](https://github.com/docling-project/docling/releases/tag/v2.91.0)\n\n## Affected packages\n\n- `docling >= 2.73.0, < 2.91.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `docling 2.91.0`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}