Dolibarr 23.0.4 before 24.0.1 ontains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through… (CVE-2026-89013)
Dolibarr versions 23.0.4 up to but not including 24.0.1 contain an authorization bypass vulnerability. This flaw allows unauthenticated attackers to read arbitrary files via crafted requests to document storage endpoints by manipulating the 'hashp' parameter. Exploitation can expose sensitive files such as application logs, business documents, and database backups containing password hashes.
AI Analysis
Technical Summary
Dolibarr 23.0.4 before 24.0.1 has an authorization bypass vulnerability (CVE-2026-89013) where unauthenticated attackers can bypass token validation by supplying 'hashp=shared' in requests to htdocs/document.php and htdocs/viewimage.php. This bypass satisfies authorization checks improperly, enabling attackers to access arbitrary files including sensitive application logs, uploaded business documents, and database backups with password hashes across multicompany entities.
Potential Impact
The vulnerability allows unauthenticated remote attackers to read arbitrary files, leading to potential exposure of sensitive information such as application logs, business documents, and database backups containing password hashes. This can compromise confidentiality but does not affect integrity or availability.
Mitigation Recommendations
A fixed version 24.0.1 or later is available. Users should upgrade to Dolibarr 24.0.1 or newer to remediate this authorization bypass vulnerability. No alternative mitigations are provided in the advisory.
Dolibarr 23.0.4 before 24.0.1 ontains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through… (CVE-2026-89013)
Description
Dolibarr versions 23.0.4 up to but not including 24.0.1 contain an authorization bypass vulnerability. This flaw allows unauthenticated attackers to read arbitrary files via crafted requests to document storage endpoints by manipulating the 'hashp' parameter. Exploitation can expose sensitive files such as application logs, business documents, and database backups containing password hashes.
CVSS v3.1
Score 7.5high
Affected software
pkg:github/dolibarr/dolibarrRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Dolibarr 23.0.4 before 24.0.1 has an authorization bypass vulnerability (CVE-2026-89013) where unauthenticated attackers can bypass token validation by supplying 'hashp=shared' in requests to htdocs/document.php and htdocs/viewimage.php. This bypass satisfies authorization checks improperly, enabling attackers to access arbitrary files including sensitive application logs, uploaded business documents, and database backups with password hashes across multicompany entities.
Potential Impact
The vulnerability allows unauthenticated remote attackers to read arbitrary files, leading to potential exposure of sensitive information such as application logs, business documents, and database backups containing password hashes. This can compromise confidentiality but does not affect integrity or availability.
Mitigation Recommendations
A fixed version 24.0.1 or later is available. Users should upgrade to Dolibarr 24.0.1 or newer to remediate this authorization bypass vulnerability. No alternative mitigations are provided in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fm6p-42mr-x6jm
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89013"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6aa47ebd55bf5e2cf58579ca
Added to database: 09/11/2026, 22:20:45 UTC
Last enriched: 09/11/2026, 22:31:44 UTC
Last updated: 09/11/2026, 23:14:42 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.