CVE-2026-111610 Details

A missing authorization vulnerability has been identified in B3log Solo versions through 4.4.0, specifically within the Article Console. This vulnerability allows authenticated authors to access articles belonging to other authors by bypassing per-author ownership checks. Attackers can exploit this issue by querying the console articles status endpoint to retrieve a list of drafts from other authors, probe the content of these drafts using the 'k' parameter, and utilize the 'push2rhy' feature to share articles with the Rhythm community.

To address this vulnerability, the 'pushArticleToCommunity' and 'getArticles' functions in the Article Console should be modified to include proper ownership checks. This can be done by applying the existing 'canAccessArticle' authorization check to ensure that authors can only manage their own articles.