A path traversal vulnerability in Outline allows authenticated, high-privileged attackers to bypass directory restrictions and access unauthorized files on the server.

This is a path traversal vulnerability (CWE-22) that fails to properly restrict file access to intended directories. The vulnerability requires the attacker to have high-level privileges within the application.

With a CVSS score of 8.7 (High), this vulnerability poses a severe risk to the confidentiality and integrity of sensitive documentation and underlying system files. Successful exploitation allows an attacker to traverse the filesystem, potentially exposing configuration files, credentials, or private data, leading to a complete compromise of the documentation service.

Immediate Action: Update the Outline instance to version 1.7.0 or later as soon as it is available from the vendor.

Proactive Monitoring: Review application access logs for attempts to access directory traversal sequences (e.g., ../) within file-related API endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block requests containing path traversal patterns directed at the application.

Public Exploit Available: No — there is no confirmed public exploit or weaponized module available.

Because this vulnerability allows high-privileged users to escape intended directory constraints, it represents a significant security risk. Administrators should audit user permissions and apply the vendor patch immediately upon release to prevent potential data exfiltration.