CVE-2026-108731: Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

Q: Who can exploit this issue?

Any authenticated user assigned the Raven User role can exploit it. No invitation or elevated administrative role is required.

Q: Which workspaces and content become accessible after exploitation?

Invite-only Public workspaces are affected when the can_only_join_via_invite setting is ignored. An attacker who joins becomes a persistent member and can read and post in Public and Open channels.

Q: Does exploitation require user interaction or a complex attack path?

No user interaction is required, and the attack complexity is low. The authenticated attacker calls the join_workspace method directly.

Q: How can administrators identify possible exploitation?

Review membership in invite-only Public workspaces for users who were not invited. The vulnerability results in persistent workspace membership, so unexpected members are a relevant indicator.

Published Oct 11, 2026

Updated

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the canonlyjoinviainvite setting. Attackers with the Raven User role can call the joinworkspace method to become persistent members, reading and posting in Public and Open channels.

Affected Software

1 affected component

Raven>=2.0.0<=3.0.0

Event History

Oct 11, 2026

CVE Published

via MITRE·12:19 PM

Data Sourced

via MITRE·12:19 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Any authenticated user assigned the Raven User role can exploit it. No invitation or elevated administrative role is required.

Which workspaces and content become accessible after exploitation?

Invite-only Public workspaces are affected when the can_only_join_via_invite setting is ignored. An attacker who joins becomes a persistent member and can read and post in Public and Open channels.

Does exploitation require user interaction or a complex attack path?

No user interaction is required, and the attack complexity is low. The authenticated attacker calls the join_workspace method directly.

How can administrators identify possible exploitation?

Review membership in invite-only Public workspaces for users who were not invited. The vulnerability results in persistent workspace membership, so unexpected members are a relevant indicator.

CVE-2026-108731: Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which workspaces and content become accessible after exploitation?

Does exploitation require user interaction or a complex attack path?

How can administrators identify possible exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which workspaces and content become accessible after exploitation?

Does exploitation require user interaction or a complex attack path?

How can administrators identify possible exploitation?