# CVE-2026-88898: AppFlowy-Cloud missing authorization in bulk publish endpoint

Source: https://junglewise.ai/threats/cve-2026-88898-appflowy-cloud-missing-authorization-in-bulk-publish-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-10. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-88898 · Severity: medium · CVSS 6.5 · Published 2026-09-10

AppFlowy-Cloud is an open-source collaborative workspace and project management platform. The bulk publish endpoint fails to verify that the user belongs to the target workspace, allowing any authenticated user to inject malicious content (with custom titles, body text, and metadata) into other organizations' public pages. Attackers can deface public-facing content or host phishing pages on trusted AppFlowy URLs.

## Quick answers

**Is CVE-2026-88898 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-88898 being exploited in the wild.

**How severe is CVE-2026-88898?** Medium severity, with a CVSS score of 6.5, published 10 September 2026.

**Which products and versions are affected?** AppFlowy AppFlowy-Cloud 0.7.2 through 0.9.64.

**Is there a fix for CVE-2026-88898?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-88898 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-88898?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a missing authorization vulnerability (CWE-862) in the publish_collabs handler in src/api/workspace/publish.rs. The endpoint accepts authenticated requests to publish content but does not call the check_workspace_owner_or_publisher function before writing to the target workspace's public namespace, unlike sibling handlers (unpublish_collabs and patch_collabs) that do enforce this check. An authenticated user only needs knowledge of a victim workspace ID to publish arbitrary content into that workspace's public namespace, where it is served to unauthenticated visitors. The vulnerability affects versions 0.7.2 through 0.9.64; AppFlowy-Cloud was archived on 2026-08-30 with the defect unfixed and no patched version available.

## Affected products

- AppFlowy AppFlowy-Cloud 0.7.2 through 0.9.64

## Timeline

- 2026-09-10: disclosed: Published to NVD and GitHub Gist after private report received no response
- 2026-08-30: other: AppFlowy-Cloud repository archived with defect unfixed

## References

- [https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3](https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3)
- [https://github.com/AppFlowy-IO/AppFlowy-Cloud](https://github.com/AppFlowy-IO/AppFlowy-Cloud)