CVE-2026-109205 LogicalDOC CVE debrief

Who should care

Defenders responsible for LogicalDOC Community Edition deployments, vulnerability management teams, and security teams should assess exposure and verify disk space usage due to the unauthenticated file upload vulnerability. Operational impacts may include potential disk space exhaustion and service disruption. Affected operators and platforms should prioritize verifying exposure and assessing disk space usage to prevent potential service disruption.

Why it matters

Defenders should prioritize verifying exposure and assessing disk space usage due to the unauthenticated file upload vulnerability in LogicalDOC Community Edition through 9.3.

• Potential disk space exhaustion due to unauthenticated file uploads.
• Possible disruption of service due to disk space exhaustion.

Technical summary

LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. This vulnerability can lead to disk space exhaustion and potential service disruption. The vulnerability is caused by the lack of authentication in the UploadServlet, allowing attackers to persist files in uncleaned temporary directories. Defenders should prioritize verifying exposure and assessing disk space usage to mitigate potential impacts.

Defensive priority

Defenders should prioritize verifying exposure and assessing disk space usage.

Recommended defensive actions

• Verify exposure by checking if the system is running LogicalDOC Community Edition version 9.3 or earlier.
• Assess disk space usage and monitor for unusual activity.
• Implement compensating controls, such as limiting access to the UploadServlet.
• Review vendor patch guidance for LogicalDOC Community Edition.
• Conduct exposure review to identify potentially affected deployments.
• Implement monitoring to detect potential disk space exhaustion.
• Perform asset inventory to identify systems that may be affected.

Evidence notes

The CVE record and source item provide details on the unauthenticated file upload vulnerability in LogicalDOC Community Edition through 9.3. Evidence limits suggest that defenders should verify exposure and assess disk space usage due to potential disk space exhaustion via unauthenticated file uploads. The vulnerability allows remote attackers to write files to disk without a session, persisting files in uncleaned temporary directories. Defenders should ground their verification in official advisories and CVE records, focusing on the

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.