CVE-2026-105744

Published 5 October 2026 · tracked since 6 October 2026

Description

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptions(tikz_engine="tectonic") invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-105472 MEDIUM 6.3
• CVE-2026-104036 MEDIUM 5.8
• CVE-2026-105782 HIGH 7.5
• CVE-2026-105784 MEDIUM 4.6
• CVE-2026-105471 HIGH 7.3
• CVE-2026-105757 MEDIUM 6.5
• CVE-2026-105758 MEDIUM 5.3
• CVE-2026-105759 MEDIUM 5.9
• CVE-2026-105469 HIGH 7.3
• CVE-2026-105470 HIGH 7.3

→ Open the live CVE board · all tools