CVE-2026-89013

Name of the Vulnerable Software and Affected Versions Dolibarr versions 23.0.4 through 24.0.0

Description An authorization bypass allows unauthenticated attackers to read arbitrary files through document storage endpoints. By providing a crafted value for the hashp parameter, specifically hashp=shared, attackers can skip token validation and satisfy authorization conditions in the 'htdocs/document.php' and 'htdocs/viewimage.php' endpoints. This can lead to unauthorized access to application logs, uploaded business documents, database backups containing password hashes, and files from other multicompany entities.

Recommendations Update to version 24.0.1. Restrict access to the 'htdocs/document.php' and 'htdocs/viewimage.php' endpoints to minimize the risk of exploitation.