HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-105744 — Docling simplifies document processing by parsing diverse formats and providing ...

·Source: NIST NVD

Updated:

Executive Summary

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ body and document preamble without restricting TeX file primitives including \openin and \openout. Cra

Analysis

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ body and document preamble without restricting TeX file primitives including \openin and \openout. Crafted input can read files available to the converter and create or overwrite writable files, and enabling the tikz_engine_allow_shell_escape option additionally permits shell commands through TeX. The default configuration, which does not enable Tectonic rendering, is not affected. This vulnerability is fixed in 2.132.0. CVSS Score: 7.5. Published: 2026-10-05T22:16:57.177.

Indicators of Compromise (1)

CVE (1)
CVE-2026-105744
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 5, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia

Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.

The Record
MEDIUMVulnerability

Finextra & ACI Worldwide launch global survey report: ‘Payments 2030: The Payoff Year’

The latest Finextra survey report, designed to help financial institutions prepare for the road to 2030, is now available to download.

Finextra
MEDIUMVulnerability

ECB approves Unicredit's bid for control of Commerzbank

Italian bank Unicredit has secured approval from the European Central Bank (ECB) to take a controlling stake in Germany's Commerzbank.

Finextra