What’s Vulnerable › Vulnerabilities
CVE-2026-24901: Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-03-17 · updated 2026-06-17
- Weakness: CWE-639
Description
Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document restoration logic allows any team member to unauthorizedly restore, view, and seize ownership of deleted drafts belonging to other users, including administrators. By bypassing ownership validation during the restore process, an attacker can access sensitive private information and effectively lock the original owner out of their own content. Version 1.4.0 fixes the issue.
Affected products
- outline: before 1.4.0 — fixed in 1.4.0
How to fix
Upgrade to a fixed version: outline 1.4.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-24901 or the next vulnerability affects your stack