CVE-2026-24009: docling-core Remote Code Execution Vulnerability Due to Unsafe PyYAML Usage
Summary
CVE-2026-24009: docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage. Affects docling-core versions >= 2.21.0, < 2.48.4. Fixed in 2.48.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
docling-core is a Python library designed for managing and processing documentation in a structured format. It allows users to load, manipulate, and save documents in various formats, including YAML. However, certain versions of docling-core are vulnerable to a Remote Code Execution (RCE) vulnerability due to improper handling of untrusted YAML data when using an outdated version of the PyYAML library.
Vulnerability Detail
The vulnerability arises from the use of PyYAML versions earlier than 5.4 in docling-core versions between 2.21.0 and 2.48.4. When the method docling_core.types.doc.DoclingDocument.load_from_yaml() is called with untrusted YAML data, it can lead to arbitrary code execution, allowing attackers to execute malicious code on the server. This vulnerability is classified under CWE-502, which pertains to deserialization of untrusted data.
How To Fix
Latest published version: 3.0.0 as of 23 Oct 2026
pip install --upgrade "docling-core==3.0.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.48.4
This is the first release that contains the fix.
pip install --upgrade "docling-core==2.48.4"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, ensure that the installed version of PyYAML is 5.4 or greater. You can check your PyYAML version with the command: pip show pyyaml. If necessary, upgrade it using: pip install --upgrade pyyaml.
Conclusion
In summary, the docling-core package is vulnerable to a Remote Code Execution attack due to unsafe usage of the PyYAML library in specific versions. Users are advised to upgrade to version 2.48.4 or later to mitigate this risk. Alternatively, ensuring that PyYAML is updated to version 5.4 or greater can serve as a temporary workaround.
See every vulnerability recorded for docling-core →
FAQ
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failing to address this vulnerability could allow attackers to execute arbitrary code on your server, potentially leading to data breaches or system compromise.
Yes, ensure that you are using PyYAML version 5.4 or greater to mitigate the risks associated with this vulnerability.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software using just the Pipfile.lock. It helps you stay informed about potential risks in your applications.
References
Related vulnerabilities
Recent vulnerabilities recorded for docling-core.
