CyberRota Analysis
AI-GeneratedThe vulnerability affects Docling versions 2.82.0 to 2.118.1, allowing crafted HTML to access local file URLs due to inadequate enforcement of the enable_local_fetch setting. This can lead to unauthorized exposure of local text files when rendered in a browser, particularly if Playwright is installed. Organizations using affected versions should prioritize remediation to prevent potential data leakage risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_page=True) permits file URLs because HTMLDocumentBackend._get_browser_request_block_reason does not enforce the enable_local_fetch setting or confine local requests to the source document directory. Crafted path-backed HTML can embed a readable local text file in a browser-rendered page image when Playwright is installed. Only filesystem Path inputs are affected because stream inputs use an opaque origin, and the default configuration, command-line interface, docling-serve, and non-rendering backends are not affected. This issue is fixed in 2.118.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)