CVE-2025-64487

Undergoing Analysis Undergoing Analysis - In Progress

Privilege Escalation in Outline Document Management System Before

Publication date: 2026-02-11

Last updated on: 2026-02-20

Assigner: GitHub, Inc.

Description

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-11

Last Modified

2026-02-20

Generated

2026-07-06

AI Q&A

2026-02-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-64487

EUVD

EUVD-2025-207025

Affected Vendors & Products

Vendor	Product	Version / Range
getoutline	outline	to 1.1.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

CVE-2025-64487 is a high-severity privilege escalation vulnerability in the Outline document management system affecting versions up to and including v1.0.1.

The vulnerability arises from inconsistent authorization checks between user and group membership management endpoints within the document sharing functionality.

This flaw allows an attacker to escalate privileges improperly due to inadequate verification of user permissions, classified under CWE-269 (Improper Privilege Management).

The issue is fixed in version 1.1.0 by implementing proper authorization checks to prevent unauthorized privilege escalation.

Impact Analysis

This vulnerability can allow an attacker to escalate their privileges within the Outline document management system.

As a result, the attacker could gain unauthorized access to documents or perform actions reserved for higher-privileged users.

This could lead to unauthorized disclosure or modification of sensitive information.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate the privilege escalation vulnerability in the Outline document management system, you should upgrade to version 1.1.0 or later, where the issue has been fixed by implementing proper authorization checks.

Hi! I’m here to help you understand CVE-2025-64487. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70