CVE-2026-105744: Docling Arbitrary File Read/Write via Untrusted TikZ
Docling validated every path it copied into the build directory, then handed the document to a Turing-complete typesetter that opens files on its own authority. The guard was real; it was just in the wrong layer.