PT-2026-7662 · Outline · Outline

Published 2026-02-11 · Updated 2026-02-20 · CVE-2025-68663

Positive Technologies · (AI Summary)

CVSS v4.0

6.9

Medium

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Outline versions prior to 1.1.0

Description Outline’s WebSocket authentication mechanism had a flaw that permitted suspended users to maintain or create real-time WebSocket connections. This allowed them to continue receiving sensitive operational updates even after their account suspension.

Recommendations Update to version 1.1.0 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-68663

GHSA-MX2C-3G2X-5M9M

Affected Products

Outline

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68663.json · Exploit
• https://github.com/outline/outline/security/advisories/GHSA-mx2c-3g2x-5m9m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68663 · Security Note
• https://github.com/outline/outline/releases/tag/v1.1.0 · Note
• https://twitter.com/CVEnew/status/2021690041701912777 · Twitter Post
• https://t.me/cveNotify/152625 · Telegram Post