Public Notion Pages Expose Editors’ Profile Photos and Email Addresses

Gbhackers •Divya • April 20, 2026

A significant data exposure issue has been brought to light regarding Notion, a highly popular productivity and note-taking application. This exposure happens without requiring any authentication, cookies, or access tokens, leaving thousands of indexable company wikis and personal pages vulnerable to data scraping. For organizations that rely on Notion for public-facing documentation, this poses a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Data Leak Exposes Editors' PII on Public Notion Pages Notion, a popular productivity platform, has been identified as having a significant data exposure issue. Public Notion pages are leaking personally identifiable information (PII) of editors, including full names, email addresses, and profile photos. This exposure occurs without any authentication requirements, making it easy for malicious actors to scrape data from thousands of publicly accessible company wikis and personal pages. Organizations using Notion for public documentation are particularly at risk, as this vulnerability could lead to targeted phishing attacks and other privacy violations. The issue has raised alarms within the cybersecurity community, prompting calls for immediate action to secure sensitive information. As of now, there are no reported patches or fixes for this vulnerability. The scope of the impact remains unclear, but it is expected to affect a large number of users and organizations relying on Notion. 2 sources 63

Public Notion Pages Expose Editors’ Profile Photos and Email Addresses

The full story

Extracted Entities

CWE Weaknesses (1)

Tools (1)