Skip to content
OpenAdvisories

Package · Go

github.com/filebrowser/filebrowser/v2

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-35585 Public exploit

    File Browser has a Command Injection via Hook Runner

    File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser — which executes administrator-defined shell commands on file eve…

    filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  • High 8.1
    CVE-2026-25890 Public exploit

    File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

    File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modifying the …

    filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  • High 8.8
    CVE-2021-46398 Public exploit

    Cross-Site Request Forgery in Filebrowser

    A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands …

    github.com/filebrowser/filebrowser/v2 Go