Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-68663 EUVD-2025-207013

Outline has a suspended user authentication bypass via WebSocket connections

Published Feb 11, 2026 · Updated Feb 12, 2026 · Assigned by GitHub_M

Description

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after their account has been suspended. This vulnerability is fixed in 1.1.0.

Affected products

VendorProductAffectedFixed
outline outline < 1.1.0 —

References