CVE-2026-125870 | bookstackapp BookStack up to 26.09.2 Image Controller checkImagePermission improper authorization

A vulnerability was found in bookstackapp BookStack up to 26.09.2. It has been classified as critical. This vulnerability affects the function ImageController::checkImagePermission of the component Image Controller. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-125870. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More