---
id: CVE-2026-65827
title: Docmost is open-source collaborative wiki and documentation software
summary: >-
  Docmost is open-source collaborative wiki and documentation software. From
  0.21.0 until 0.95.0, any authenticated workspace member with edit rights to a
  space can upload an archive to the page-import feature whose ZIP extraction
  routine …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-400
  - CWE-409
  - CWE-770
vendor: docmost
product: docmost
affected:
  - 'docmost >= 0.21.0, < 0.95.0'
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T20:17:29.903'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-65827'
references:
  - url: >-
      https://github.com/docmost/docmost/commit/04110884b4e90a43cc5b337e063d0b7493be5da7
    label: security-advisories@github.com
  - url: 'https://github.com/docmost/docmost/releases/tag/v0.95.0'
    label: security-advisories@github.com
  - url: 'https://github.com/docmost/docmost/security/advisories/GHSA-frjw-66gr-799m'
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-24T19:22:03.264160Z'
ingestedAt: '2026-09-24T18:49:36.721Z'
---

## Overview

Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated workspace member with edit rights to a space can upload an archive to the page-import feature whose ZIP extraction routine does not limit total uncompressed size, per-entry size, or entry count. The extractor writes entries to the server temp directory and automatically extracts one nested ZIP, allowing an outer upload within the default 200 MB limit to expand by multiple GB. The resulting disk exhaustion can crash the import worker and degrade or take down the instance for all tenants. This issue is fixed in version 0.95.0.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.