Medium severity · published Oct 27, 2026
CVE-2026-117563
MrDoc through 1.1.1 Broken Access Control via manage_doc_share
New
5.4
CVSS
0.2%
EPSS
No
On KEV
Description
MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID and username to re-enable disabled shares or remove access codes, exposing private documents.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MR
MrDoc · zmister2016
through 1.1.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-117563
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-117563
github.com
https://github.com/zmister2016/MrDoc
github.com
https://github.com/zmister2016/MrDoc/blob/v1.1.1/app_doc/views.py#L1835-L1849
github.com
https://github.com/zmister2016/MrDoc/commit/2cd13ff0659dbef9aea59d5af122a21204942262
github.com
https://github.com/zmister2016/MrDoc/issues/208
www.vulncheck.com
https://www.vulncheck.com/advisories/mrdoc-through-1.1.1-broken-access-control-via-manage-doc-share
More from MrDoc
5.4
CVE-2026-111645
MrDoc through 1.1.1 Missing Authorization via api/import_local_doc/ Endpoint