Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

CVE-2026-85697

Documenso 2.17.0 PDF Route Ignores Document Visibility

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Documenso
Products
Documenso
CVE-2026-82472

Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked document records.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Documenso
Products
Documenso
CVE-2026-71247

Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents

Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal-order, not-yet-signed recipient in the same envelope, with no restriction on field type. A newer V2 signing path (sign-envelope-field.ts) explicitly blocks assistants from completing SIGNATURE fields, and the project's own test suite comments confirm this guard is absent from the V1 path used here.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Documenso
Products
Documenso
CVE-2026-13543

Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication

A vulnerability was detected in Documenso up to 2.11.0. Affected by this vulnerability is an unknown functionality of the file packages/auth/server/lib/utils/handle-oauth-callback-url.ts of the component Google OAuth Login. The manipulation results in improper authentication. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Documenso
Products
Documenso
CVE-2024-52271

PDF Document Spoofing in Documenso

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will render the vulnerability only, not all layers are flattened. This issue affects Documenso: through 1.8.0, >1.8.0 and Documenso SaaS (Hosted) as of 2024-12-05.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Documenso
Products
Documenso