CVE-2026-109205: LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers can repeatedly send multipart requests with unlimited file parts to /upload, persisting files in uncleaned temporary directories and exhausting server disk space.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any remote attacker able to reach the application's /upload endpoint can exploit it. No authentication, session, or user interaction is required.
What is required to trigger disk exhaustion?
An attacker can repeatedly send multipart requests containing unlimited file parts to /upload. The uploaded files persist in temporary directories that are not cleaned up, allowing disk consumption to accumulate.
What is the operational impact?
The issue can exhaust available server disk space, causing a denial of service. The provided data identifies no confidentiality or integrity impact.
Which versions are affected?
LogicalDOC Community Edition through version 9.3 is affected.