---
id: CVE-2026-44022
aliases:
  - GHSA-2j5p-7p5m-cvqr
  - PYSEC-2026-2145
title: >-
  Docling: Potential Path Traversal via LaTeX \includegraphics and \input
  Commands
summary: >-
  Docling: Potential Path Traversal via LaTeX \includegraphics and \input
  Commands
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'
vendor: docling
product: docling
ecosystem: pip
affected:
  - 'docling >= 2.73.0, < 2.91.0'
patched:
  - docling 2.91.0
published: '2026-06-03'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-2j5p-7p5m-cvqr'
references:
  - url: >-
      https://github.com/docling-project/docling/security/advisories/GHSA-2j5p-7p5m-cvqr
  - url: 'https://github.com/docling-project/docling'
  - url: 'https://github.com/docling-project/docling/releases/tag/v2.91.0'
tags:
  - osv
  - pip
epss: 0.00207
epssPercentile: 0.09574
ingestedAt: '2026-07-13T18:57:51.339Z'
---

## Overview

### Impact
The LaTeX backend's handling of `\includegraphics`, `\input`, and `\include` commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences (e.g., `../../../etc/passwd`) to:
- Read arbitrary files from the file system accessible to the process
- Include sensitive files in the converted document output
- Potentially access configuration files, credentials, or other sensitive data

### Patches
Fixed in version 2.91.0. The fix implements strict path validation using `Path.resolve().is_relative_to()` to ensure all resolved paths remain within the base document directory. Attempts to traverse outside the base directory are logged and blocked.

### Workarounds
Avoid processing untrusted LaTeX documents. If processing is necessary, run in a sandboxed environment with restricted file system access.

### References
- Fix release: [v2.91.0](https://github.com/docling-project/docling/releases/tag/v2.91.0)

## Affected packages

- `docling >= 2.73.0, < 2.91.0`

## Remediation

Upgrade to a patched release:

- `docling 2.91.0`