PT-2026-7661 · Outline · Outline

Published 2026-02-11 · Updated 2026-02-20 · CVE-2025-64487

Positive Technologies · (AI Summary)

CVSS v3.1

7.6

High

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Outline versions prior to 1.1.0

Description A privilege escalation issue exists in the Outline document management system. The problem stems from inconsistent authorization checks related to user and group membership management. This allows for unauthorized access and potential control over the system.

Recommendations Update to version 1.1.0 or later.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-64487

GHSA-C8XF-3J86-7686

Affected Products

Outline

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64487.json · Exploit
• https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64487 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64487 · Vendor Advisory
• https://github.com/outline/outline/releases/tag/v1.1.0 · Note
• https://t.me/cveNotify/152624 · Telegram Post
• https://twitter.com/CVEnew/status/2021690044633764246 · Twitter Post