CVE-2026-43886highCWE-269

CVE-2026-43886: falha de alta gravidade em outline

Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar outline

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.2epss 0.2%
Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, a logic error in OAuthInterface.validateScope() uses Array.some() to validate requested OAuth scopes, causing the function to accept the entire scope array if any single scope is valid. An attacker can smuggle the wildcard * scope by requesting scope=read *, escalating a read-only OAuth token to full unrestricted API access including write, delete, and admin operations. This vulnerability is fixed in 1.7.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
Produtos afetados
outline · outline
CVEs relacionadas — outline

No mesmo produto, das mais perigosas para as menos.

CVE-2026-113611MEDIUMOutline before 1.8.0 Information Disclosure via Orphaned Webhook SubscriptionsEPSS 0.5%CVE-2024-40626HIGHStored Cross-site Scripting (XSS) vulnerability in Outline editorEPSS 0.5%CVE-2026-54573MEDIUMAuthorization Bypass in API Key/OAuth Scopes via Path Parsing DiscrepancyEPSS 0.5%CVE-2026-33640CRITICALOutline has a rate limit bypass that allows brute force of email login OTPEPSS 0.5%CVE-2026-25062MEDIUMOutline Affected an Arbitrary File Read via Path Traversal in JSON ImportEPSS 0.4%CVE-2025-58351MEDIUMOutline's Local File Storage Feature can Cause CSP BypassEPSS 0.4%