CVE-2026-35604

Go/github.com/filebrowser/filebrowser/v2 CVE-2026-35604: high

File Browser share links remain accessible after Share/Download permissions are revoked

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.63.1 or later.

go get github.com/filebrowser/filebrowser/v2@v2.63.1

Affected

Fixed versions

Sources

• osv: GHSA-v9w4-gm2x-6rvf
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-v9w4-gm2x-6rvf
• https://nvd.nist.gov/vuln/detail/CVE-2026-35604
• https://github.com/filebrowser/filebrowser/pull/5888
• https://github.com/filebrowser/filebrowser

CVE-2026-35604 · published 2026-04-08T00:04:59Z · modified 2026-06-25T23:11:03.368603847Z · JSON

Go/github.com/filebrowser/filebrowser CVE-2026-35604: unknown

File Browser share links remain accessible after Share/Download permissions are revoked in github.com/filebrowser/filebrowser

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5659
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-v9w4-gm2x-6rvf
• https://nvd.nist.gov/vuln/detail/CVE-2026-35604
• https://github.com/filebrowser/filebrowser/pull/5888

CVE-2026-35604 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:38.693974751Z · JSON

Go/github.com/filebrowser/filebrowser/v2 CVE-2026-35604: unknown

File Browser share links remain accessible after Share/Download permissions are revoked in github.com/filebrowser/filebrowser

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.63.1 or later.

go get github.com/filebrowser/filebrowser/v2@v2.63.1

Affected

Fixed versions

Sources

• osv: GO-2026-5659#Go/github.com/filebrowser/filebrowser/v2
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-v9w4-gm2x-6rvf
• https://nvd.nist.gov/vuln/detail/CVE-2026-35604
• https://github.com/filebrowser/filebrowser/pull/5888

CVE-2026-35604 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:38.693974751Z · JSON