CVE-2026-24901: Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts
Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document restoration logic allows any team member to unauthorizedly restore, view, and seize ownership of deleted drafts belonging to other users, including administrators. By bypassing ownership validation during the restore process, an attacker can access sensitive private information and effectively lock the original owner out of their own content. Version 1.4.0 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24901?
CVE-2026-24901 is considered a medium severity vulnerability due to its potential for unauthorized access to private deleted drafts.
How do I fix CVE-2026-24901?
To fix CVE-2026-24901, upgrade to Outline version 1.4.0 or later to apply the necessary security patches.
What does CVE-2026-24901 affect?
CVE-2026-24901 affects the Outline collaborative documentation service prior to version 1.4.0.
What type of vulnerability is CVE-2026-24901?
CVE-2026-24901 is classified as an Insecure Direct Object Reference (IDOR) vulnerability.
Who is impacted by CVE-2026-24901?
Any team member using Outline prior to version 1.4.0 may be impacted by CVE-2026-24901, as it allows unauthorized access to private deleted drafts.