MEDIUM 5.3 NVD
CVE-2026-120489
Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticated members to publish documents int
Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticated members to publish documents into private collections without write access. Attackers can detach a child document via documents.unpublish, retaining parentDocumentId, then call documents.update with a private collection UUID to inject phishing content.
References
- https://github.com/outline/outline/blob/v1.11.0/server/commands/documentCreator.ts#L135-L1
- https://github.com/outline/outline/commit/d249b34e8e5fd465d542cad87190d411fdcbd5dc
- https://github.com/outline/outline/releases/tag/v1.12.0
- https://github.com/outline/outline/security/advisories/GHSA-h6ff-rw9x-5mq2
- https://www.vulncheck.com/advisories/outline-before-1.12.0-incorrect-authorization-via-aut
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-11-02 via NVD.
vulnfeed aggregates 17991 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.