CVE-2026-109202
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
LogicalDOC LogicalDOC Community Edition
CVSS
7.1HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.26%Chance of exploitation activity in the next 30 days, higher than 16% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since ZipExport.addFolderDocuments() skips READ and DOWNLOAD permission checks, to download all of its documents in a ZIP archive.
Text from CVE List
Affected versions 1
- LogicalDOC Community Editionaffected: all versions through 9.3CVE List
References 6
- github.com/logicaldoc/community/commit/648047ee0ec95c294bb983e511fed60dbc67977fFixvia CVE List
- vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-missing-authorization-via-zip-export-servletAdvisoryvia CVE List
- github.com/logicaldoc/community/discussions/119Referencevia CVE List
- github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/logicaldoc/web/ExportZip.java#L57Referencevia CVE List
- github.com/logicaldoc/community/blob/9.3/logicaldoc-core/src/main/java/com/logicaldoc/core/transfer/ZipExport.java#L233Referencevia CVE List
- github.com/logicaldoc/communityReferencevia CVE List