CVE-2026-111169: La Suite Docs through 6.0.0 Authorization Bypass via Comment Thread Creation
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resourceid, inserting comments into another document's thread without access.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated La Suite Docs user can exploit it. The attacker also needs to know the UUID of a comment thread associated with a document they are not authorized to access.
What access does an attacker need before sending the forged comment request?
The attacker needs an account and access to their own document resource, which is used as the resource_id in the POST request. They do not need access to the document that owns the targeted comment thread.
What is the impact of successful exploitation?
An attacker can insert comments into a thread belonging to a document they cannot access. The provided data indicates an integrity impact only; it does not indicate confidentiality or availability impact.
Which versions are affected?
La Suite Docs through version 6.0.0 is affected. The provided data does not identify a fixed version.