CVE-2026-120489

Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish that allows authenticated members to publish documents into private collections without write access. Attackers can detach a child document via documents.unpublish, retaining parentDocumentId, then...

CVE-2026-120489

Versions of Outline prior to 1.12.0 are affected by an incorrect authorization vulnerability in the authorizeDocumentPublish() function. This flaw allows authenticated members to publish documents into private collections despite lacking the necessary write access. An attacker can exploit this by...

CVE-2026-120489 Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft

Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish that allows authenticated members to publish documents into private collections without write access. Attackers can detach a child document via documents.unpublish, retaining parentDocumentId, then...