CVE-2026-91081

Name of the Vulnerable Software and Affected Versions Docs versions prior to 5.6.2

Description A server-side request forgery (SSRF) issue exists in the 'cors-proxy' endpoint. This allows anonymous attackers to initiate outbound requests by providing a public document UUID. By exploiting DNS time-of-check-time-of-use (TOCTOU) race conditions—a scenario where a system checks a condition and then uses the result, but the condition changes between the check and the use—and shared address space bypasses, attackers can access internal network resources and exfiltrate image content.

Recommendations Update to version 5.6.2 or later. As a temporary workaround, restrict access to the 'cors-proxy' endpoint to minimize the risk of exploitation.