Description
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Claris | FileMaker Server | < 26.0.1 | 26.0.1 |