Vulnerability · Published Oct 12, 2026 · Assigned by VulnCheck

CVE-2026-109205LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet

High 7.5

In plain English

A high-severity resource allocation without limits in LogicalDOC Community Edition from LogicalDOC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 63.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file parts to /upload, persisting files in uncleaned temporary directories and exhausting server disk space.

Affected products (as reported)

Vendor	Product	Versions
LogicalDOC	LogicalDOC Community Edition	0 – through 9.3

Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/logicaldoc/community/discussions/119 technical-description
Patch Commit patch
https://github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/logicaldoc/web/UploadServlet.java#L128 technical-description
https://github.com/logicaldoc/community product
VulnCheck Advisory: LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet third-party-advisory