Authorization Bypass Vulnerability in La Suite Docs by Suitenumerique

CVE-2026-111169

What is CVE-2026-111169?

La Suite Docs versions up to 6.0.0 are susceptible to an authorization bypass vulnerability. This issue permits authenticated users to inject comments into document threads that they do not have permission to access. By knowing a specific thread UUID, an attacker can manipulate a POST comment request, effectively submitting comments to unauthorized threads through a different document's resource_id, thereby circumventing security measures designed to restrict access.

References