CVE-2026-43886 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: May 12, 2026
Outline - Authentication Bypass
Published: May 11, 2026Updated: May 12, 2026Remote Exploitable
Overview
Outline 0.84.0 to 1.6.1 contains an OAuth scope validation logic error caused by improper use of Array.some() in OAuthInterface.validateScope(), letting attackers escalate read-only OAuth tokens to full API access by smuggling wildcard * scope, exploit requires crafted OAuth scope request.
Severity & Score
Severity: High
CVSS Score: 8.2
Impact
Attackers can escalate read-only OAuth tokens to full unrestricted API access, including write, delete, and admin operations.
Mitigation
Upgrade to version 1.7.0 or later.
Related Resources
Details
- CVE ID
- CVE-2026-43886
- Severity
- High
- CVSS Score
- 8.2
- Type
- broken_authentication
- Status
- rejected
CWE
- CWE-269
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N