{"id":"CVE-2026-24009","published":"2026-01-22T15:04:52Z","modified":"2026-01-22T15:59:19Z","title":"Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage","vendor":"docling-project","product":"docling-core","tier":"tail","description":{"text":"Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01534,"percentile":0.74824,"provenance":"source"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/docling-project/docling-core/issues/482","tags":["x_refsource_MISC"]},{"url":"https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c","tags":["x_refsource_MISC"]},{"url":"https://github.com/advisories/GHSA-8q59-q68h-6hv4","tags":["x_refsource_MISC"]},{"url":"https://github.com/docling-project/docling-core/releases/tag/v2.48.4","tags":["x_refsource_MISC"]}],"priority":{"score":25.6,"factors":[{"name":"EPSS percentile","points":14.96},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":5.67}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2026-02-26","earliestUrl":"https://github.com/BiranPeretz/docling-core-CVE-2026-24009","repos":[{"name":"BiranPeretz/docling-core-CVE-2026-24009","url":"https://github.com/BiranPeretz/docling-core-CVE-2026-24009","stars":0,"created":"2026-02-26"}]},"first":{"date":"2026-02-26","source":"PoC-in-GitHub","url":"https://github.com/BiranPeretz/docling-core-CVE-2026-24009"},"provenance":"source"},"vendorSlug":"docling-project","affectedVersions":[{"vendor":"docling-project","product":"docling-core","versions":[">= 2.21.0, < 2.48.4"]}],"affected":[{"ecosystem":"PyPI","package":"docling-core","vulnerableRanges":[">=2.21.0, <2.48.4"],"patched":["2.48.4"],"from":["GHSA-vqxf-v2gg-x3hc","PYSEC-2026-1313"],"provenance":"source"}],"euvd":{"id":"EUVD-2026-3807","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-red-hat-pyyaml-cve-2020-1747","parents":[{"from":"CVE-2020-14343","to":"CVE-2026-24009","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"osv-related","provenance":"source","id":"GHSA-8q59-q68h-6hv4","via":"related"},{"kind":"osv-related","provenance":"source","id":"GHSA-vqxf-v2gg-x3hc","via":"reference","url":"https://github.com/advisories/GHSA-8q59-q68h-6hv4"},{"kind":"osv-related","provenance":"source","id":"PYSEC-2026-1313","via":"reference","url":"https://github.com/advisories/GHSA-8q59-q68h-6hv4"}]}],"packageHistory":[{"cve":"CVE-2026-24009","published":"2026-01-22","fixed":"2.48.4","kev":false},{"cve":"CVE-2026-44019","published":"2026-07-16","fixed":"2.74.1","kev":false,"link":{"from":"CVE-2026-24009","to":"CVE-2026-44019","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:docling-core","fromFixed":"2.48.4","toFixed":"2.74.1","daysApart":175}]}},{"cve":"CVE-2026-44023","published":"2026-07-16","fixed":"2.74.1","kev":false,"link":{"from":"CVE-2026-24009","to":"CVE-2026-44023","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:docling-core","fromFixed":"2.48.4","toFixed":"2.74.1","daysApart":175}]}}],"package":"PyPI:docling-core"}}