CVE-2025-64487CWE-269

Outline is vulnerable to privilege escalation vulnerability in document sharing

High · published February 11, 2026

CVSS v3.1
7.6
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-02-11T20:25Z
EPSS history
Timeline
  • 11 FEB 20:25Z
    Outline is vulnerable to privilege escalation vulnerability in document sharing
    cvelistv5