CVE-2026-111350

The Papermark application (versions through 0.22.0 ) is vulnerable to a missing authorization flaw in the data room viewer group API. Authenticated users can exploit this by providing a victim team's data room and group identifiers to perform unauthorized actions. Specifically, an attacker can se...