LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to… (CVE-2026-109205)

LogicalDOC Community Edition through version 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet component. Remote attackers can send multipart HTTP requests to the /upload endpoint without a valid session, allowing them to write files to disk. Attackers can repeatedly upload unlimited file parts, causing files to persist in temporary directories that are not cleaned up, which can exhaust server disk space and lead to denial of service conditions. The vulnerability is tracked as CVE-2026-109205 and has a CVSS 3.1 base score of 7.5, reflecting high severity due to the potential for availability impact.

The vulnerability allows unauthenticated remote attackers to upload files to the server, which can fill up disk space by creating persistent files in temporary directories. This can lead to denial of service by exhausting server resources. There is no impact on confidentiality or integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, consider restricting access to the /upload endpoint, implementing network-level controls to limit request rates, or monitoring disk usage to detect abnormal file accumulation. Avoid relying on generic mitigations unless specifically recommended by the vendor.