3
CVEs
0
Critical
2
High
0
KEV
3
PoC
2
Unpatched C/H
0.0%
Patch Rate
0.4%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (1)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-85619 | Cross-workspace IDOR authorization bypass in AppFlowy-Cloud 0.9.64 allows authenticated users to read, modify, or delete documents and database rows belonging to other users' workspaces. The Casbin-based access control layer in `libs/access-control/src/casbin/collab.rs` validates a user's membership in their own workspace but fails to confirm that the requested collab object actually belongs to that workspace, enabling object ID substitution attacks across the HTTP API. No public exploit code has been identified at time of analysis, though the flaw is fully documented in a public GitHub issue. | HIGH | 7.7 | 0.5% | 59 |
PoC
No patch
|
| CVE-2026-88898 | Cross-tenant authorization bypass in AppFlowy-Cloud 0.7.2 through 0.9.64 allows any authenticated user to publish arbitrary content into another tenant's workspace namespace via the unguarded bulk publish endpoint. The flaw stems from missing workspace membership validation in the publish path (src/biz/workspace/publish.rs), enabling horizontal privilege escalation across tenant boundaries - attackers can inject attacker-controlled titles, body text, and metadata into victim organizations' public workspace URLs to stage phishing pages or deface legitimate content. A publicly available proof-of-concept exploit (VulnCheck / mtholmquist gist) is available, materially lowering the bar for abuse in multi-tenant AppFlowy-Cloud deployments. | HIGH | 7.1 | 0.2% | 56 |
PoC
No patch
|
| CVE-2026-85622 | Cross-workspace data exfiltration in AppFlowy-Cloud through 0.9.64 allows authenticated users to read documents and databases from workspaces they are not members of. The `establish_ws_connection_v2` WebSocket handler in `src/api/ws.rs` omits workspace membership validation, permitting any valid session to bind to arbitrary workspace contexts. By subsequently transmitting sync Manifest messages containing victim object identifiers, an attacker retrieves full collaboration document and database state without any victim interaction required. No public exploit identified at time of analysis, though the VulnCheck advisory and referenced GitHub issue provide sufficient technical detail to reconstruct the attack. | MEDIUM | 6.0 | 0.3% | 50 |
PoC
No patch
|