Back to Database
Status published
High
CVE-2025-64487
Outline is vulnerable to privilege escalation vulnerability in document sharing
Vulnerability Description
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-64487
Credits & Attribution
No credits recorded in the NVD database.
References
More from outline
View All →CVE-2025-68663
Outline has a suspended user authentication bypass via WebSocket connections
Medium
6.9
CVE-2025-58351
Outline's Local File Storage Feature can Cause CSP Bypass
Medium
6.8
CVE-2024-40626
Stored Cross-site Scripting (XSS) vulnerability in Outline editor
High
7.3
CVE-2023-3532
Cross-site Scripting (XSS) - Stored in outline/outline
High
8.5
CVE-2022-2342
Cross-site Scripting (XSS) - Stored in outline/outline
High
7.3
Affected Vendor
outline
View all reports →Affected Software
outline
Vulnerable Versions:
<= 1.0.1
Timeline
Official Publish:
February 11th, 2026
Last Modified:
February 11th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N