CVE-2025-64487

Published: Feb 11, 2026Modified: Jun 17, 2026

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Exploitability: 2.3 / Impact: 4.7

Source: security-advisories@github.com (Secondary)

Description

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

Affected (1)

Products: Getoutline: Outline

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Getoutline Outline	Before 1.1.0

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://github.com/outline/outline/releases/tag/v1.1.0

Source: security-advisories@github.com

Release Notes

https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.