CVE-2026-125375— MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlers

Quick assessment

Affected

zmister2016 MrDoc

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MrDoc 1.1.1 及以下版本在和处理器中存在授权缺失漏洞。该漏洞允许已注册用户通过在中提供任意文档 ID，修改其他用户的文档。拥有任一项目的攻击者可通过顺序 ID 对文档进行重新归属和重排，并将其状态设置为“草稿”或“已移除”，从而隐藏已发布的文档。

CVSS 5.4 · Medium Updated Nov 10, 2026

Possible ATT&CK Techniques 2 AI

T1551 T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlers

Source: CVE Program / CVE List V5

Vulnerability Description

MrDoc through 1.1.1 contains a missing authorization vulnerability in the project_doc_sort and manage_project_doc_sort handlers that allows registered users to modify other users' documents by supplying arbitrary document IDs in sort_data. Attackers owning any project can reparent and reorder documents by sequential ID and set their status to draft or removed, hiding published documents.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

通过用户控制密钥绕过授权机制

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
zmister2016	MrDoc	0 ~ 1.1.1	-

II. Public POCs for CVE-2026-125375

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125375

请登录查看更多情报信息。

Other References for CVE-2026-125375 (4)

https://github.com/zmister2016/MrDoc/blob/40e43bbdf10502930effd7efbdf5887435cbd148/app_doc/views_import.py#L189-L224 technical-description
https://github.com/zmister2016/MrDoc/commit/e2c26d7858289601dde331b205b82ea5e2d2dad1 patch
https://github.com/zmister2016/MrDoc/issues/209 issue-tracking
https://www.vulncheck.com/advisories/mrdoc-through-1.1.1-missing-authorization-via-project-document-sort-handlers third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-125375

IV. Related Vulnerabilities

Same product: MrDoc

Same vendor: zmister2016

Same weakness: CWE-639