CVE-2026-47214
CVE-2026-47214: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.1
High [CVE-2026-47214] Unsafe URI and Path Handling in HTML Backend
CVE-2026-47214Source published Source updated
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0. Its HTML backend contained vulnerabilities related to unsafe handling of Uniform Resource Identifiers (URIs) and file paths. This could allow an attacker to access local files, navigate outside of intended directories (path traversal), and potentially access internal network resources (Server-Side Request Forgery or SSRF). The primary impact of this flaw is information disclosure, potentially exposing sensitive data. This is an Important vulnerability in the Docling HTML backend, which is used for document processing within Red Hat OpenShift AI. This risk is…
- Affected products in this advisory
- Red Hat OpenShift AI 3.4
- Source-reported affected versions
- < 2.94.0
- Source-reported fixed versions
- 2.94.0
- rhoai/odh-autorag-rhel9:1786612637
- RHSA-2026:60520
- Mitigation guidance
- To mitigate this issue, ensure that `enable_local_fetch` and `enable_remote_fetch` are set to `False` when Docling is used to process untrusted HTML documents. These are the default settings for Docling, so no action is required unless these configurations have been explicitly changed.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.