ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-89013

Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php

CVSS 4.0 8.7 HIGHCVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-89013

Published

Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by supplying a crafted hashp parameter value. Attackers can send a request with hashp=shared to skip token validation while satisfying the authorization condition in htdocs/document.php and htdocs/viewimage.php, gaining access to application logs, uploaded business documents, database backups containing password hashes, and files belonging to other multicompany entities.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-89013

Published

Dolibarr

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "vendor": "Dolibarr",
                    "product": "Dolibarr",
                    "packageURL": "pkg:github/Dolibarr/dolibarr",
                    "repo": "https://github.com/Dolibarr/dolibarr",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "23.0.4",
                            "versionType": "semver",
                            "lessThan": "24.0.1"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON