Outline — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Outline, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-41649	Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces CWE-639	7.7	High	2026-04-28
CVE-2026-33640	Outline has a rate limit bypass that allows brute force of email login OTP CWE-307	9.1	-	2026-03-26
CVE-2026-28506	Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts CWE-200	4.3	Medium	2026-03-17
CVE-2026-24901	Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts CWE-639	8.1	High	2026-03-17
CVE-2025-68663	Outline has a suspended user authentication bypass via WebSocket connections CWE-287	4.3^AI	Medium^AI	2026-02-11
CVE-2025-64487	Outline is vulnerable to privilege escalation vulnerability in document sharing CWE-269	7.6	High	2026-02-11
CVE-2026-25062	Outline Affected an Arbitrary File Read via Path Traversal in JSON Import CWE-22	5.5	Medium	2026-02-11
CVE-2023-54331	Outline 1.6.0 - Unquoted Service Path CWE-428	7.8	High	2026-01-13
CVE-2025-58351	Outline's Local File Storage Feature can Cause CSP Bypass CWE-79	6.8	Medium	2025-09-03
CVE-2024-40626	Stored Cross-site Scripting (XSS) vulnerability in Outline editor CWE-79	7.3	High	2024-07-16

All 10 known CVE vulnerabilities affecting Outline with full Chinese analysis, references, and POCs where available.