Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
Outline has a suspended user authentication bypass via WebSocket connections
CVE-2025-68663
Description
Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism that allows suspended users to maintain or establish real-time WebSocket connections and continue receiving sensitive operational updates after their account has been suspended. This vulnerability is fixed in 1.1.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/outline/outline/releases/tag/v1.1.0mitrex_refsource_MISC
- github.com/outline/outline/security/advisories/GHSA-mx2c-3g2x-5m9mmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.