PT-2026-38412 · Unknown · Docling-Graph

Ayoub-Ibm · Published 2026-05-07 · Updated 2026-05-14 · CVE-2026-44520

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Docling-Graph versions prior to 1.5.1

Description The URLInputHandler class in docling graph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating if the target resolves to a private, loopback, or link-local IP address. The URLValidator only verifies the scheme and that the netloc is not empty, omitting IP-level validation. Furthermore, the requests.head() function was called with allow redirects=True, which enables an attacker to redirect requests to internal endpoints through an intermediary URL. An attacker controlling the --source CLI argument or the PipelineConfig.source API parameter can trigger Server-Side Request Forgery (SSRF), a flaw where the server is coerced into making unintended requests. This can be used to access cloud metadata endpoints to steal IAM credentials or reach internal services on loopback or private network ranges.

Recommendations Update to version 1.5.1. Ensure all URLs passed to URLInputHandler come exclusively from trusted, internal sources and never from user-supplied or external input.

Fix

SSRF

Open Redirect

Weakness Enumeration

CWE-918

CWE-601

Related Identifiers

CVE-2026-44520

GHSA-FQPH-J6V6-JVGX

Affected Products

Docling-Graph

References · 6

• https://osv.dev/vulnerability/GHSA-fqph-j6v6-jvgx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44520 · Security Note
• https://github.com/docling-project/docling-graph/security/advisories/GHSA-fqph-j6v6-jvgx · Note
• https://github.com/docling-project/docling-graph · Note
• https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html · Note
• https://reddit.com/r/VulnMatter/comments/1t691c5/resumen_diario_de_vulnerabilidades_07052026 · Reddit Post