Go/github.com/filebrowser/filebrowser CVE-2026-32758: medium 6.5, EPSS 0.40%
File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter in github.com/filebrowser/filebrowser
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4711
- nvd: CVE-2026-32758
- https://github.com/filebrowser/filebrowser/security/advisories/GHSA-9f3r-2vgw-m8xp
- https://github.com/filebrowser/filebrowser/commit/4bd7d69c82163b201a987e99c0c50d7ecc6ee5f1
- https://github.com/filebrowser/filebrowser/releases/tag/v2.62.0
CVE-2026-32758 · published · modified · JSON