CVE-2026-44016: Docling Unsafe Playwright-based HTML Rendering Vulnerability
Summary
CVE-2026-44016: Docling: Unsafe Playwright-based HTML Rendering. Affects docling versions >= 2.82.0, < 2.91.0. Fixed in 2.91.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Docling is an open-source tool designed for rendering HTML documents using Playwright, a popular automation library. It allows users to convert and display HTML content efficiently. However, certain configurations in versions 2.82.0 to 2.91.0 expose the application to security risks, particularly when rendering untrusted HTML documents, leading to potential JavaScript execution and unauthorized network access.
Vulnerability Detail
The vulnerability arises from the Playwright-based rendering feature in Docling, which, when the HTML backend is explicitly configured, allows for the execution of arbitrary JavaScript and unrestricted network access. This can lead to severe consequences, including Server-Side Request Forgery (SSRF) attacks, data exfiltration, or even remote code execution in the rendering environment. The issue is particularly critical as it affects how untrusted HTML documents are processed, making it a significant security concern for applications using this package.
How To Fix
Latest published version: 2.142.0 as of 22 Oct 2026
pip install --upgrade "docling==2.142.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.91.0
This is the first release that contains the fix.
pip install --upgrade "docling==2.91.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, refrain from using the render_page=True option when processing untrusted HTML documents. This will help mitigate the risk of executing malicious scripts or making unauthorized network requests.
Conclusion
The vulnerability identified as CVE-2026-44016 in the Docling package poses significant risks when rendering untrusted HTML documents. It is crucial to update to version 2.91.0 or later to mitigate these risks effectively. Additionally, using the provided workarounds can help protect your application until an update can be applied.
See every vulnerability recorded for docling →
FAQ
Versions of Docling from 2.82.0 to 2.91.0 are affected by this vulnerability.
The risks include arbitrary JavaScript execution, unauthorized network access, SSRF attacks, data exfiltration, and remote code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for this vulnerability is 8.2, indicating a high severity level.
If an immediate update is not possible, ensure to avoid rendering untrusted HTML documents by not using the render_page=True option.
References
Related vulnerabilities
Recent vulnerabilities recorded for docling.
