What is CVE-2026-59262?

CVE-2026-59262 is a medium-severity vulnerability in Affine Monorepo, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-07-08.

How severe is CVE-2026-59262?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Affine Monorepo

CVE-2026-59262

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Affine Monorepo — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-59262?: CVE-2026-59262 is a medium-severity vulnerability in Affine Monorepo, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-07-08.
How severe is CVE-2026-59262?: Medium severity. CVSS v3 base score is 6.5 out of 10.