Back to Database
Status published
Medium
CVE-2025-68663
Outline has a suspended user authentication bypass via WebSocket connections
Vulnerability Description
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after their account has been suspended. This vulnerability is fixed in 1.1.0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-68663
Credits & Attribution
No credits recorded in the NVD database.
References
More from outline
View All →CVE-2025-64487
Outline is vulnerable to privilege escalation vulnerability in document sharing
High
7.6
CVE-2025-58351
Outline's Local File Storage Feature can Cause CSP Bypass
Medium
6.8
CVE-2024-40626
Stored Cross-site Scripting (XSS) vulnerability in Outline editor
High
7.3
CVE-2023-3532
Cross-site Scripting (XSS) - Stored in outline/outline
High
8.5
CVE-2022-2342
Cross-site Scripting (XSS) - Stored in outline/outline
High
7.3
Affected Vendor
outline
View all reports →Affected Software
outline
Vulnerable Versions:
< 1.1.0
Timeline
Official Publish:
February 11th, 2026
Last Modified:
February 12th, 2026
Added to House:
July 22nd, 2026