CVE-2025-68663: Outline has a suspended user authentication bypass via WebSocket connections
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after their account has been suspended. This vulnerability is fixed in 1.1.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68663?
CVE-2025-68663 is considered a critical vulnerability due to its potential for unauthorized access by suspended users.
How do I fix CVE-2025-68663?
To fix CVE-2025-68663, upgrade Outline to version 1.1.0 or later to ensure proper WebSocket authentication.
What type of vulnerability is CVE-2025-68663?
CVE-2025-68663 is an authentication bypass vulnerability affecting the WebSocket connections in the Outline software.
What impact does CVE-2025-68663 have on affected systems?
CVE-2025-68663 allows suspended users to maintain or establish real-time WebSocket connections, potentially compromising sensitive data.
When was CVE-2025-68663 discovered?
CVE-2025-68663 was discovered prior to the release of version 1.1.0 of Outline.