LogicalDOC Community Edition: Missing authorization in SoapDocumentService

Summary

LogicalDOC Community Edition through 9.3 does not properly check authorization in the SoapDocumentService operations. An authenticated user can call document operations such as copy, getExtractedText, deleteVersion, reindex, deleteLink and restore on documents they are not entitled to, using SOAP or the REST document endpoint and sequential document IDs. This allows disclosure, deletion or tampering with documents.

Affected

• LogicalDOC Community Edition up to and including 9.3
• Default configuration: unaffected according to the CVE record's affected-version note, but the vendor entry lists 0 to <= 9.3 as affected

Fixed in

Unknown. No confirmed fixed release has been published in the sources reviewed. A commit (648047ee0ec95c294bb983e511fed60dbc67977f) is referenced as a possible fix but is unconfirmed.

Workaround

• No vendor-published workaround found.
• Restrict access to the SOAP and REST document endpoints to trusted networks or VPN.
• Limit user accounts to those needed and enforce strong passwords.
• Review document access logs for unusual SOAP or REST calls.

Exploitation

• No evidence of exploitation in the wild found.
• No public proof of concept found for this CVE.
• CISA SSVC: Exploitation none, Automatable no, Technical Impact total.
• Requires valid authentication.

Our recommendation

• Check whether the LogicalDOC instance is reachable from the internet and who has user accounts.
• Restrict access to the SOAP and REST endpoints to trusted networks.
• Monitor the vendor's GitHub releases and apply the fixed version as soon as it is confirmed.
• Review document access logs for unusual activity.
• Check the whole product for other related CVEs from the same batch.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• NVD/CVE references: LogicalDOC community repository github.com
• Affected code: SoapDocumentService.java (tag 9.3) github.com
• Candidate fix commit 648047ee github.com
• GitHub discussion #119 github.com
• VulnCheck advisory www.vulncheck.com
• Rapid7 entry via Vulners vulners.com
• VulDB entry vuldb.com
• OpenCVE entry app.opencve.io

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 04:55.