Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-68663

Outline has a suspended user authentication bypass via WebSocket connections

Description

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after their account has been suspended. This vulnerability is fixed in 1.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

outline outline

  • < 1.1.0affected

References