CVE-2025-64487

7.6 highEPSS 0.2%

High (7.6) in getoutline outline. EPSS 0.2% chance of exploitation in the next 30 days.

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

Severity

CVSS 3.1

7.6 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2026-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

getoutline:outline

References

https://github.com/outline/outline/releases/tag/v1.1.0
https://github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686

Check your stack JSON