Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-54162 EUVD-2025-207437GHSA-682g-84mv-mcxh

File Station 5

Published Feb 11, 2026 · Updated Feb 11, 2026 · Assigned by qnap

Description

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5068 and later

Affected products

VendorProductAffectedFixed
QNAP Systems File Station 5 5.5.x – < 5.5.6.5068 5.5.6.5068

References