CVE-2026-125379

EUVD-2026-120542
Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can retrieve cached community or contact-only posts from the pod-wide cache before the XMPP authorization check runs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
3.1 LOW
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 17.45%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
movimmovim
𝑥
≤ 0.35.5
CNA
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
movim
bionic
dne
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
trusty
dne
xenial
dne
Common Weakness Enumeration
References
https://github.com/movim/movim
https://github.com/movim/movim/blob/v0.35.5/app/Widgets/Post/Post.php#L126-L160
https://github.com/movim/movim/commit/378e0368368d0dd9cb090b78e68a63064d47d512
https://www.vulncheck.com/advisories/movim-through-0.35.5-authorization-bypass-via-post-ajaxgetpost-cached-post-read