Skip to content
OpenAdvisories

Vendor

documenso

4 known vulnerabilities.

Products

documenso 4 Documenso SaaS (Hosted) 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85697

    Documenso 2.17.0 PDF Route Ignores Document Visibility

    Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing owne…

    documenso documenso
  • Medium 6.5
    CVE-2026-71247

    Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents

    Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal-order, not-yet-signed recipient in the same envelope, with no restriction on fi…

    documenso documenso