ZeroDay Findings
Sign inSign up

Findings

CVE-2026-41649

Outline is a service that allows for collaborative documentation.

Published Apr 28, 2026 · updated Jul 24, 2026 · getoutline outline

Outline is a service that allows for collaborative documentation. The API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both and are provided in the request, the authorization logic only checks access to the collection, completely ignoring the document. This allows an authenticated attacker to generate a valid public share link for any document on the platform, including documents belonging to other workspaces. The full document contents can then be retrieved via the endpoint. Version 1.7.0 contains a patch.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 28, 2026 · NIST NVD

    Detected

    Outline is a service that allows for collaborative documentation. The API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both and are provided in the request, the authorization logic only checks access to the collection, completely ignoring the document. This allows an authenticated attacker to generate a valid public share link for an

  2. Jul 24, 2026 · NIST NVD

    Updated

    Outline is a service that allows for collaborative documentation. The API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both and are provided in the request, the authorization logic only checks access to the collection, completely ignoring the document. This allows an authenticated attacker to generate a valid public share link for an

Affected

  • cpe getoutline/outlineversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-41649

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41649

    Outline is a service that allows for collaborative documentation. The API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both and are provided in the request, the authorizat

    nvd.nist.gov

References