High severity7.6NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026

CVE-2025-64487

Description

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document management system due to inconsistent authorization checks between user and group membership management endpoints. This vulnerability is fixed in 1.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Outline/Outline3 versions
cpe:2.3:a:getoutline:outline:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:getoutline:outline:*:*:*:*:*:*:*:*range: <1.1.0
- (no CPE)range: <1.1.0
- (no CPE)range: <= 1.0.1
Outline/Outline document management systemllm-create
Range: <1.1.0

Patches

Vulnerability mechanics

References

github.com/outline/outline/security/advisories/GHSA-c8xf-3j86-7686nvdVendor Advisory
github.com/outline/outline/releases/tag/v1.1.0nvdRelease Notes

News mentions

How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
GitHub Security Lab · Mar 6, 2026

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000