CVE-2026-105743

Name of the Vulnerable Software and Affected Versions Docling versions 2.91.0 through 2.131.0

Description The validate url safety function in docling/backend/utils/image resource loader.py performs a single IPv4 lookup to validate a hostname but subsequently allows the HTTP client to resolve and parse the original URL again. This behavior enables DNS rebinding, mixed public and internal address records, and backslash authority parser disagreement, allowing access to internal services. Additionally, HTMLBackendOptions(render page=True) permits HTTP and HTTPS browser requests without validating the resolved destination. Exploitation requires remote fetching to be enabled, and the response content is only exposed if it is decoded as an image or passively rendered in a page screenshot.

Recommendations Update to version 2.132.0.