CVE-2026-105746

A low impact information disclosure flaw was found in the Docling document processing library, which Red Hat ships in Red Hat OpenShift AI (RHOAI) and Lightspeed Core container images. The KServe V2 OCR engine does not check the pipeline_options.enable_remote_services setting: it sends page images of processed documents to its configured remote OCR endpoint even when the caller has set that policy control to false, resulting in unintended disclosure of document page images to the configured external endpoint. The destination is selected by the deployment's configuration and not by an attacker, and exposure requires a privileged configuration that both enables the KServe V2 OCR engine and relies on remote services being disabled; integrity and availability are not affected. All in-scope Red Hat products that bundle affected docling releases (RHOAI and Lightspeed Core RAG tool container images) are affected. Because this flaw is LOW impact and Red Hat does not file trackers for LOW severity flaws, the fix is deferred for these products; the residual risk is that document page images continue to be transmitted to the configured remote OCR endpoint in deployments relying on enable_remote_services=false until a fixed docling release is incorporated. The RHOAI rhoai-3.3 stream is also affected but is out of support scope. Red Hat rates this flaw LOW impact with a CVSS 3.1 score of 2.2 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N), while NIST rates it 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N); the difference reflects Red Hat's assessment that the transmission requires privileged administrative configuration of a remote OCR endpoint in a deployment that relies on remote services being disabled, rather than direct attacker action.