Vulnerability · Published Mar 17, 2026 · Assigned by GitHub_M
CVE-2026-24901Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
High 8.1
In plain English
A high-severity authorization bypass via user-controlled key in outline from outline. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Official description
Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document restoration logic allows any team member to unauthorizedly restore, view, and seize ownership of deleted drafts belonging to other users, including administrators. By bypassing ownership validation during the restore process, an attacker can access sensitive private information and effectively lock the original owner out of their own content. Version 1.4.0 fixes the issue.
Affected products (as reported)
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
- https://github.com/outline/outline/security/advisories/GHSA-gmr5-43f5-79f5 x_refsource_CONFIRM