[ Vendor · 6 CVEs ]
cloudreve
CVEs affecting cloudreve published in the last 30 days, plus any cloudreve CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101048 | 27 Sep 2026 | CVSS 5.4 | cloudreveCloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/admin/node/test/downloader)… | |
| CVE-2026-101051 | 27 Sep 2026 | CVSS 3.1 | cloudreveCloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside… | |
| CVE-2026-101056 | 27 Sep 2026 | CVSS 5.3 | cloudreveCloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID. Attackers who previously had… | |
| CVE-2026-77637 | 22 Sep 2026 | CVSS 3.8 | Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth ScopeCloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit… | Fix |
| CVE-2026-77633 | 22 Sep 2026 | CVSS 7.1 | Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of serviceCloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale… | Fix |
| CVE-2026-79913 | 22 Sep 2026 | CVSS 6.5 | Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addressesCloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in… | Fix |