Low severity3.1NVD Advisory· Published Oct 15, 2026· Updated Oct 15, 2026
CVE-2026-111169
CVE-2026-111169
Description
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments into another document's thread without access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=6.0.0
Patches
Vulnerability mechanics
References
5- github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/permissions.pynvd
- github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/serializers.pynvd
- github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/viewsets.pynvd
- github.com/suitenumerique/docs/pull/2838nvd
- www.vulncheck.com/advisories/la-suite-docs-through-6.0.0-authorization-bypass-via-comment-thread-creationnvd
News mentions
0No linked articles in our index yet.