---
id: CVE-2026-109201
title: >-
  LogicalDOC Community Edition through 9.3 contains a missing authorization
  vulnerability in SoapDocumentService operations that allows authenticated
  users to access and modify unauthorized documents
summary: >-
  LogicalDOC Community Edition through 9.3 contains a missing authorization
  vulnerability in SoapDocumentService operations that allows authenticated
  users to access and modify unauthorized documents. Attackers can call copy,
  getExtractedT…
severity: high
cvss: 8.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'
cwe:
  - CWE-862
published: '2026-10-12'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T14:17:10.680'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109201'
references:
  - url: 'https://github.com/logicaldoc/community'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/logicaldoc/community/blob/9.3/logicaldoc-webservice/src/main/java/com/logicaldoc/webservice/soap/endpoint/SoapDocumentService.java#L445
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/logicaldoc/community/commit/648047ee0ec95c294bb983e511fed60dbc67977f
    label: disclosure@vulncheck.com
  - url: 'https://github.com/logicaldoc/community/discussions/119'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-missing-authorization-in-documentservice
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-12T14:50:34.119Z'
---

## Overview

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP or /services/rest/document with sequential document IDs to disclose, delete, or tamper with documents.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.