CVE-2026-117563

MEDIUM 5.4

MrDoc through 1.1.1 Broken Access Control via manage_doc_share

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID and username to re-enable disabled shares or remove access codes, exposing private documents.

CWE	CWE-639
Vendor	zmister2016
Product	mrdoc
Published	Oct 27, 2026

Stay Ahead of the Next One

Get instant alerts for zmister2016 mrdoc

Be the first to know when new medium vulnerabilities affecting zmister2016 mrdoc are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

zmister2016 / MrDoc

0 ≤ 1.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/zmister2016/MrDoc/issues/208 github.com: https://github.com/zmister2016/MrDoc github.com: https://github.com/zmister2016/MrDoc/commit/2cd13ff0659dbef9aea59d5af122a21204942262 github.com: https://github.com/zmister2016/MrDoc/blob/v1.1.1/app_doc/views.py#L1835-L1849 vulncheck.com: https://www.vulncheck.com/advisories/mrdoc-through-1.1.1-broken-access-control-via-manage-doc-share

Credits

hieuPenguinnn