PT-2026-30222 · Bookstackapp+1 · Bookstack

Ghufran Khan · CVE-2026-5484 · Published 2026-04-03 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v4.0

5.5

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Name of the Vulnerable Software and Affected Versions BookStack versions prior to 26.03.1

Description An issue exists in the Chapter Export Handler component within the chapterToMarkdown() function of the app/Exports/ExportFormatter.php file. A remote attacker can manipulate the pages argument to bypass access controls.

Recommendations Upgrade to version 26.03.1.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-5484

Affected Products

Bookstack

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5484.json · Exploit
• 🔥 https://github.com/Ghufran2/CVE-Bookstack/blob/main/Permission%20Bypass%20in%20Markdown%20Chapter%20Export · Exploit
• https://github.com/BookStackApp/BookStack/releases/tag/v26.03.1 · Patch
• https://github.com/BookStackApp/BookStack/commit/8a59895ba063040cc8dafd82e94024c406df3d04 · Patch
• https://osv.dev/vulnerability/CVE-2026-5484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5484 · Security Note
• https://vuldb.com/vuln/355091/cti · Note
• https://vuldb.com/submit/781762 · Note
• https://t.me/cveNotify/208080 · Telegram Post
• https://vuldb.com/vuln/355091 · Note
• https://bookstackapp.com/blog/bookstack-release-v26-03-1 · Note
• https://github.com/BookStackApp/BookStack · Note