Skip to content
OpenAdvisories
High · 8.3 CVE-2026-3266 EUVD-2026-9348GHSA-7qvm-mwp7-fqc3

Improper access control vulnerability has been discovered in OpenText™ Filr.

Published Mar 3, 2026 · Updated Mar 4, 2026 · Assigned by OpenText

Description

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs.

This issue affects Filr: through 25.1.2.

Affected products

VendorProductAffectedFixed
OpenText™ Filr ≤ 25.1.2 —

References