Vulnerability · Published Oct 27, 2026 · Assigned by VulnCheck

CVE-2026-117563MrDoc through 1.1.1 Broken Access Control via manage_doc_share

Medium 5.4

In plain English

A medium-severity authorization bypass via user-controlled key in MrDoc from zmister2016. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.2%top 87.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID and username to re-enable disabled shares or remove access codes, exposing private documents.

Affected products (as reported)

Vendor	Product	Versions
zmister2016	MrDoc	0 – through 1.1.1

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

GitHub Issue #208 issue-tracking
https://github.com/zmister2016/MrDoc product
https://github.com/zmister2016/MrDoc/commit/2cd13ff0659dbef9aea59d5af122a21204942262 patch
https://github.com/zmister2016/MrDoc/blob/v1.1.1/app_doc/views.py#L1835-L1849 technical-description
VulnCheck Advisory: MrDoc through 1.1.1 Broken Access Control via manage_doc_share third-party-advisory