--- title: "Security Hotfix R250326" slug: "security-hotfix-r250326" description: "Security hotfix R250326 for Autoform DM 10 or later" updated: 2026-05-06T13:56:23Z published: 2026-05-06T13:56:23Z canonical: "kb.lasernetgroup.com/security-hotfix-r250326" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.lasernetgroup.com/llms.txt > Use this file to discover all available pages before exploring further. # Security Hotfix R250326 To fix the security vulnerability R250326, the Lasernet Group recommends [upgrading to Autoform DM 10.5.5](/v1/docs/autoform-dm-1055-release-notes). However, if an upgrade is not currently feasible, you can run the hotfix batch script on an existing Autoform DM installation and plan to upgrade at the earliest opportunity. The hotfix removes the security vulnerability with minimal disruption or change to the application. It has no functional impact on your system, other than to resolve the vulnerability, and does not affect your ability to upgrade in the future. ## Prerequisites - A standalone server or a cluster running Autoform DM 10.0.x or later. - The [security hotfix downloaded](https://lngsupportdownloads.blob.core.windows.net/autoformdm/Tools/security-hotfix-r250326.zip) to your test environment. ## Installation The installation instructions depend on whether Autoform DM is running in [standalone](/v1/docs/security-hotfix-r250326#standalone-installations) or [clustered](/v1/docs/security-hotfix-r250326#clustered-installations) mode. Run the hotfix batch script on your test environment first. After successful deployment and testing, repeat the process on all other environments. ### Standalone Installations First, [run the batch script in test mode](/v1/docs/security-hotfix-r250326#run-the-batch-script-in-test-mode) to verify the vulnerability exists on your server. Then, if necessary, [run the script in patch mode](/v1/docs/security-hotfix-r250326#run-the-batch-script-in-patch-mode) to fix it. #### Run the Batch Script in Test Mode In test mode, the batch script scans your installation without making any updates. You do not need to shut down the Autoform DM service. 1. Copy and extract the two files from `security-hotfix-r250326.zip` into the `tools` directory on your Autoform DM server. For standalone installations, the default path is `C:\Program Files\Formpipe Software\Autoform DM\<Server_10.x>\tools`. Substitute `<Server_10.x>` for the appropriate Autoform DM version. 2. Open a command prompt and change into the `tools` directory. For example, from the root directory (`C:\`), use the following command, again substituting `<Server_10.x>` for the appropriate Autoform DM version: ```plaintext cd Program Files\Formpipe Software\Autoform DM\ - DM\tools ``` 3. Run the batch script in test mode: ```plaintext security-hotfix-r250326.bat -t ``` The script detects your installation type (see 1 in the image below) and path (2). ![Batch script detecting installation type and path.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/test mode standalone server.png) 4. Enter `Y` to continue running the script. If the script detects the security vulnerability, `PATCH REQUIRED` is displayed on the console, and you must continue to the next section to patch your system. ![Console message showing that the security patch is required.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/test mode standalone server patch required(1).PNG) 5. Press any key to exit the script. #### Run the Batch Script in Patch Mode Patch mode creates a backup of your existing installation and then applies the security hotfix. During this process, the Autoform DM application is redeployed. For this reason, Lasernet Group recommends performing this task outside of core business hours. 1. Shut down the Autoform DM service. 2. From a command prompt, change into the `tools` directory. For example, from the root directory (`C:\`), use the following command, substituting `<Server_10.x>` with the appropriate Autoform DM version: ```plaintext cd Program Files\Formpipe Software\Autoform DM\ - DM\tools ``` 3. Run the batch script in patch mode: ```plaintext security-hotfix-r250326.bat ``` The script detects your installation type (see 1 in the image below) and path (2). ![Batch script detecting installation type and path.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/patch mode standalone server.png) 4. Enter `Y` to continue running the script. The script copies a backup of the existing installation to the `deployments` directory `C:\Program Files\Formpipe Software\Autoform DM\<Server_10.x> - DM\wildfly 22.0.1.Final\standalone\deployments\pdm_app_module.ear.bak` (see “a” in the image below) and then applies the security updates. ![Batch script installing security updates on a standalone server.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/patch mode server installation(1).png) 5. When `PATCH COMPLETE` is displayed on the console (b), press any key to exit the script. > [!TIP] > Tip > > The script also creates a file called `security-hotfix-r250326.success` in the `tools` directory, which enables you to track which servers have been updated. You can delete both this file and the backup when you have successfully tested your server. 6. Restart the Autoform DM service, then complete all test procedures before deploying the hotfix to all other environments. ### Clustered Installations Install the security hotfix on the PDC only. Do not apply the hotfix directly to the cluster nodes. First, [run the batch script in test mode](/v1/docs/security-hotfix-r250326#run-the-batch-script-in-test-mode1) to verify the vulnerability exists on your server. Then, if necessary, [run the script in patch mode](/v1/docs/security-hotfix-r250326#run-the-batch-script-in-patch-mode1) to fix it. #### Run the Batch Script in Test Mode In test mode, the batch script scans your installation without making any updates. You do not need to shut down the Autoform DM service on your PDC. 1. Copy and extract the two files from `security-hotfix-r250326.zip` into the `tools` directory on your PDC. For clustered installations, the default path is `C:\Program Files\Formpipe Software\Autoform DM\<Server_10.x> - <cluster_name> - <cluster_role>\tools` . Substitute `<Server_10.x>`, `<cluster_name>`, and `<cluster_role>` for the correct details for your PDC. 2. Open a command prompt and change into the `tools` directory. For example, from the root directory (`C:\`), use the following command, substituting `<Server_10.x>`, `<cluster_name>`, and `<cluster_role>` for the correct details for your PDC: ```plaintext cd Program Files\Formpipe Software\Autoform DM\ - - \tools ``` 3. Run the batch script in test mode: ```plaintext security-hotfix-r250326.bat -t ``` The script detects your installation type (see 1 in the image below) and path (2). ![Batch script detecting installation type and path.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/test mode cluster.png) 4. Enter `Y` to continue running the script. If the script detects the security vulnerability, `PATCH REQUIRED` is displayed on the console, and you must continue to the next section to patch your system. ![Batch script detecting that security vulnerability is present on cluster.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/test mode pdc patch required.PNG) 5. Press any key to exit the script. #### Run the Batch Script in Patch Mode Patch mode creates a backup of your existing installation and applies the security hotfix to the PDC. The PDC then pushes the updates to all cluster nodes. For this reason, you must not shut down the PDC or cluster nodes while the script is running. 1. From a command prompt, change into the `tools` directory. For example, from the root directory (`C:\`), use the following command, substituting `<Server_10.x>`, `<cluster_name>`, and `<cluster_role>` with the correct details for your PDC: ```plaintext cd Program Files\Formpipe Software\Autoform DM\ - - \tools ``` 2. Run the batch script in patch mode: ```plaintext security-hotfix-r250326.bat ``` The script detects your installation type (see 1 in the image below) and path (2). ![Batch script detecting installation type and path.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/patch mode cluster.png) 3. Enter `Y` to continue running the script. The script starts (see “a” in the image below), copies a backup of your installation to the `deployments` directory `C:\Program Files\Formpipe Software\Autoform DM\<Server_10.x> - <cluster_name> - <cluster_role>\wildfly-22.0.1.Final\domain\deployments\pdm_app_module.ear.bak` (b), and then applies the security updates to both the PDC and cluster nodes. ![Script running in patch mode.](https://cdn.document360.io/c831ef63-c6b3-48ee-b443-3e33644e4e2e/Images/Documentation/patch mode pdc continue(1).png) If the redeployment pauses or fails, follow the troubleshooting guidance on the console. For example, if the PDC or cluster nodes are shut down, you will be prompted to restart the cluster before resuming the script (c). 4. When `PATCH COMPLETE` is displayed on the console, press any key to exit. > [!TIP] > Tip > > The script also creates a file called `security-hotfix-r250326.success` in the `tools` directory. You can delete both this file and the backup when you have successfully tested your server 5. Complete all test procedures before deploying the hotfix to all other environments.