github.com/filebrowser/filebrowser

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-35585 Public exploit

File Browser has a Command Injection via Hook Runner

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 until 2.33.8, the hook system in File Browser — which executes administrator-defined shell commands on file eve…

filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go

Apr 7, 2026
High 8.1

CVE-2026-25890 Public exploit

File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modifying the …

filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go

Feb 9, 2026