CVE-2026-92800 PUBLISHED

Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected.

• George Chen finder

• Researcher write-up
• reset collaboration connection in cascade for all children
• reset_connections is called with the access record's own document id
• https://github.com/suitenumerique/docs
• VulnCheck Advisory: Docs before 5.4.1 Stale Collaboration Session After Access Revocation

• Insufficient Session Expiration CWE