PT-2026-3946 · Unknown+1 · Docling-Core+1

Avioligo · Published 2021-03-25 · Updated 2026-01-24 · CVE-2026-24009

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Docling Core versions 2.21.0 through 2.48.3

Description Docling Core, a library for document processing, contains a Remote Code Execution (RCE) issue related to PyYAML. This issue, identified as CVE-2020-14343, arises when the application uses PyYAML versions prior to 5.4 and invokes the docling core.types.doc.DoclingDocument.load from yaml() function with untrusted YAML data. The vulnerability allows an attacker to execute arbitrary code on the system by exploiting the python/object/new constructor. The issue stems from an incomplete fix for CVE-2020-1747. The FullLoader deserialization method in PyYAML is susceptible to code execution when processing untrusted YAML files.

Recommendations Docling Core versions 2.21.0 through 2.48.3 should be upgraded to version 2.48.4. If upgrading Docling Core is not immediately possible, ensure that the installed version of PyYAML is 5.4 or greater.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-20

CWE-502

Related Identifiers

CVE-2026-24009

GHSA-8Q59-Q68H-6HV4

GHSA-VQXF-V2GG-X3HC

Affected Products

Docling-Core

Pyyaml

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24009.json · Exploit
• https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc · Vendor Advisory
• https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c · Patch
• https://osv.dev/vulnerability/GHSA-8q59-q68h-6hv4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24009 · Security Note
• https://osv.dev/vulnerability/GHSA-vqxf-v2gg-x3hc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14343 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24009 · Vendor Advisory
• https://github.com/SeldonIO/seldon-core/issues/2252 · Note
• https://github.com/yaml/pyyaml/issues/420 · Note
• https://github.com/yaml/pyyaml/commit/a001f2782501ad2d24986959f0239a354675f9dc · Note
• https://github.com/yaml/pyyaml/issues/420#issuecomment-663673966 · Note
• https://github.com/yaml/pyyaml · Note
• https://github.com/docling-project/docling-core · Note
• https://github.com/docling-project/docling-core/releases/tag/v2.48.4 · Note