CVE-2026-111350

MediumCVSS 5.0

Published: 15/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Summary

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.

Risk Assessment

Authenticated users can delete or modify other teams' viewer groups and share links, leading to data loss and confidentiality breaches.

Recommendation

Update Papermark to a version later than 0.22.0 if available, or implement additional authorization checks in the data room viewer group API.

Other vulnerabilities in Papermark

CVE-2026-57957Medium
A vulnerability in Papermark through version 0.22.0 is caused by a CORS misconfiguration, allowing unauthenticated remote attackers to perform credentialed cross-origin requests. Attackers can exploit the TUS-based viewer upload endpoint that reflects arbitrary request Origins with Access-Control-Allow-Credentials set to true.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS