Vulnerability in Logicaldoc Community Edition
CVE-2026-109204
LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to reset victims' passwords, lock them out, and reveal their email addresses.
Published .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/logicaldoc/community/discussions/119 (technical-description)
- github.com/logicaldoc/community/commit/afc8554e6654865295bffc8f080c7cb899caf057 (patch)
- github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/lo… (technical-description)
- github.com/logicaldoc/community (product)
- www.vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-forced-pa… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-109204?
- CVE-2026-109204 is a medium-severity vulnerability in Logicaldoc Community Edition, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 6.3/10. Published 2026-10-12.
- How severe is CVE-2026-109204?
- Medium severity. CVSS v3 base score is 6.3 out of 10.