Insecure Direct Object Reference in Outline Service Affects Document Restoration

CVE-2026-24901

What is CVE-2026-24901?

The Outline service, used for collaborative documentation, is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability that affects its document restoration logic. This flaw allows any team member to restore, view, and take ownership of deleted drafts belonging to other users, including those with administrative rights. By circumventing necessary ownership validation during the restoration process, an attacker can access sensitive private information and potentially lock original content owners out of their own drafts. This issue affects all versions prior to 1.4.0, which includes a patch to remediate the vulnerability.

References