CVE-2026-120449
Outline before 1.12.0 Improper Access Control via Public Document Shares
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpublished documents because the share loader ignores unpublished status. Attackers holding an existing share link can query shares.info, documents.info, or the /s/ share routes to read withdrawn content, while shares.revoke returns 404 and blocks revocation.
| CWE | CWE-672 |
| Vendor | outline |
| Product | outline |
| Published | Nov 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for outline outline
Be the first to know when new medium vulnerabilities affecting outline outline are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
Outline / Outline
0 < 1.12.0
References
github.com: https://github.com/outline/outline/security/advisories/GHSA-rq53-m97j-f2pg github.com: https://github.com/outline/outline/commit/d015a32459b5f5c5a8ef67aeb81742eeab430c52 github.com: https://github.com/outline/outline/releases/tag/v1.12.0 github.com: https://github.com/outline/outline/blob/v1.11.0/server/commands/shareLoader.ts#L50-L77 vulncheck.com: https://www.vulncheck.com/advisories/outline-before-1.12.0-improper-access-control-via-public-document-shares
Credits
VG