Vulnerabilities in Papermerge
5 resultsCVE-2026-105314HIGHPapermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth fileEPSS 1.1%CVE-2026-110623HIGHPapermerge Core through 3.5.3 Missing Authorization in Shared Nodes APIEPSS 0.5%CVE-2026-110622HIGHPapermerge Core through 3.5.3 Missing Authorization in Page Management and OCR EndpointsEPSS 0.5%CVE-2025-10209MEDIUMPapermerge DMS Authorization Token improper authorizationEPSS 0.4%CVE-2026-110624LOWPapermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/allEPSS 0.3%