CVE-2026-125379

LOW 3.1

Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read

CVSS Score

3.1

EPSS Score

0.0%

EPSS Percentile

0th

Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or contact-only posts from the pod-wide cache before the XMPP authorization check runs.

CWE	CWE-639
Vendor	movim
Product	movim
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for movim movim

Be the first to know when new low vulnerabilities affecting movim movim are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

movim / movim

0 ≤ 0.35.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/movim/movim/commit/378e0368368d0dd9cb090b78e68a63064d47d512 github.com: https://github.com/movim/movim github.com: https://github.com/movim/movim/blob/v0.35.5/app/Widgets/Post/Post.php#L126-L160 vulncheck.com: https://www.vulncheck.com/advisories/movim-through-0.35.5-authorization-bypass-via-post-ajaxgetpost-cached-post-read

Credits

hieuPenguinnn Timothée Jaussoin