Is CVE-2026-111169 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111169?

CVE-2026-111169 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-111169

Description

La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments into another document's thread without access.