5.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44022

CVE-2026-44022: Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

Impact

The LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicious LaTeX documents with path traversal sequences (e.g., ../../../etc/passwd) to:

Read arbitrary files from the file system accessible to the process
Include sensitive files in the converted document output
Potentially access configuration files, credentials, or other sensitive data

Patches

Fixed in version 2.91.0. The fix implements strict path validation using Path.resolve().is_relative_to() to ensure all resolved paths remain within the base document directory. Attempts to traverse outside the base directory are logged and blocked.

Workarounds

Avoid processing untrusted LaTeX documents. If processing is necessary, run in a sandboxed environment with restricted file system access.

References

Fix release: v2.91.0

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44022

CVE-2026-44022:

5.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
docling	pip	>= 2.73.0, < 2.91.0	2.91.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a path traversal issue within the LaTeX processing functionality of the docling library. The advisory points out that the \includegraphics, \input, and \include commands were susceptible to this vulnerability. The issue was addressed in version 2.91.0.

By comparing the git tags between the last vulnerable version and the patched version, the commit 65ef18075fa8720a66aa0a2608313beb0844e2b4 was identified as the security fix, with the descriptive commit message "fix: prevent path traversal in LaTeX macro handlers".

The analysis of this commit reveals that the file docling/backend/latex/handlers/macros.py was modified. The function _process_macro within this file was updated to include path validation logic. Specifically, the patch introduces checks using Path.resolve().is_relative_to() to ensure that the file paths provided to the LaTeX commands do not resolve to a location outside of the document's base directory.

The vulnerable function is therefore _process_macro, as it is the function that processes the malicious input (the file path from the LaTeX command) and, prior to the patch, lacked the necessary sanitization, leading to the path traversal vulnerability. When a malicious document is processed, this function would appear in the runtime profile as it attempts to resolve and access the unauthorized file path.

Vulnerable functions

_process_macro

docling/backend/latex/handlers/macros.py

The function `_process_macro` is responsible for handling LaTeX macros like `\includegraphics` and `\input`. Before the patch, it would take a file path provided in the LaTeX document and use it to construct a path on the file system without validating if the path escapes the base directory. This allowed an attacker to craft a malicious LaTeX document with path traversal sequences (e.g., `../../../etc/passwd`) to read arbitrary files from the system.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.