CVE-2026-92800 — Docs before 5.4.1 Stale Collaboration Session After Access Revocation
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time rea…
Published: 2026-09-16 · CVSS: 7.6 · CVSS 4.0
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7