filebrowser through 2.63.16 Privilege Escalation via Signup

File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution

File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin

FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

File Browser: Authentication Bypass via Proxy Auth Header Forgery

File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file

A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a…

File Browser before 2.63.20 Privilege Escalation via Proxy Authentication

File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands

FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via…

File Browser: Command Allowlist Bypass via Shell Metacharacter Injection

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup

FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass

File Browser before v2.63.22 Authorization Bypass via Recursive Operations

File Browser: Colliding username normalization gives two users the same home directory

File Browser share links remain accessible after Share/Download permissions are revoked

File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely

File Browser: TUS Delete Endpoint Bypasses Delete Permission Check

File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

File Browser: Command Execution not Limited to Scope

File Browser Allows Execution of Shell Commands That Can Spawn Other Commands

File Browser: Incorrect access control in public directory shares via rule path rebasing

File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope

File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check

File Browser has an access rule bypass via HasPrefix without trailing separator in path matching

FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info

File Browser Insecurely Handles Passwords

File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix

File Browser has a Command Injection via Hook Runner

File Browser is vulnerable to Stored Cross-Site Scripting via text/template branding injection

File Browser through 2.63.23 Path Traversal via Symlink Alias

filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization

File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass

File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser: Path traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames

File Browser vulnerable to command execution allowlist bypass

File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint

filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message

FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload

File Browser: DoS Vulnerability on Public Login API

File Browser has an Authorization Policy Bypass in its Public Share Download Flow

File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter

File Browser: Path Traversal in Public Share Links Exposes Files Outside Shared Directory

File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing

File Browser allows sensitive data to be transferred in URL