CVE-2026-92800
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected.
Risk Assessment
A user whose permissions were revoked can still read and modify confidential sub-documents, leading to data leakage and unauthorized changes. This is especially risky during staff offboarding or contractor access revocation.
Recommendation
Upgrade Docs to version 5.4.1 or later. Until patched, force re-authentication and terminate active websocket sessions whenever permissions change.
Other vulnerabilities in Docs
Original NVD description (English source)
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS