CVE-2026-52853

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-52853
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-52853.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-52853
Aliases
  • GHSA-84fx-mvqx-p5gx
Published
2026-09-24T18:31:54Z
Modified
2026-09-25T03:48:35Z
Severity
  • 5.2 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N CVSS Calculator
Summary
Docmost: Privilege Escalation - ADMIN Can Invite Users as OWNER
Details

Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace invitation flow to invite an external email address with the OWNER role because the role ceiling does not prevent ADMIN users from granting privileges above their own. When the invitation is accepted, the new account receives OWNER-level permissions, allowing the ADMIN to create a backdoor OWNER account or promote a colluding external user to the workspace's highest privilege level. This issue is fixed in version 0.90.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-269"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52853.json"
}
References

Affected packages

Git / github.com/docmost/docmost

Affected ranges

Type
GIT
Repo
https://github.com/docmost/docmost
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ef04c22aeadfb82103f1e8c13a746d352e68a5f7
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.90.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.2.3
v0.*
v0.10.0
v0.10.1
v0.10.2
v0.2.0
v0.2.1
v0.2.10
v0.2.2
v0.2.4
v0.2.5
v0.2.7
v0.2.8
v0.2.9
v0.20.0
v0.20.1
v0.20.2
v0.20.3
v0.20.4
v0.21.0
v0.22.0
v0.22.1
v0.22.2
v0.23.0
v0.23.1
v0.23.2
v0.24.0
v0.24.1
v0.25.0
v0.25.0-beta.1
v0.25.1
v0.25.2
v0.25.3
v0.3.0
v0.3.1
v0.4.0
v0.4.1
v0.5.0
v0.6.0
v0.6.1
v0.6.2
v0.7.0
v0.70.0
v0.70.1
v0.70.2
v0.70.3
v0.71.0
v0.71.1
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.80.1
v0.9.0
v0.90.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-52853.json"