PT-2026-53218 · Documenso · Documenso

Jeetpal2007 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13543

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Documenso versions prior to 2.11.1

Description Improper authentication exists in the Google OAuth Login component within the file packages/auth/server/lib/utils/handle-oauth-callback-url.ts. This issue allows a remote attacker to manipulate the authentication process, although the attack is characterized by high complexity and is difficult to exploit.

Recommendations Update to a version newer than 2.11.0. Restrict the use of the Google OAuth Login functionality until the pending fix is officially released and applied.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-13543

Affected Products

Documenso

References · 9

• 🔥 https://github.com/documenso/documenso/issues/2758 · Exploit
• https://github.com/documenso/documenso/pull/2837 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-13543 · Security Note
• https://vuldb.com/cve/CVE-2026-13543 · Note
• https://vuldb.com/vuln/374551/cti · Note
• https://vuldb.com/submit/842579 · Note
• https://github.com/documenso/documenso · Note
• https://twitter.com/VulmonFeeds/status/2071510389813080500 · Twitter Post
• https://vuldb.com/vuln/374551 · Note