Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.3

Cloudreve allows authenticated users to write files outside intended folder

CVE-2026-101051 · published 22 days ago
Summary

In Cloudreve versions before 4.16.1, a logged‑in user can cause the system to place files in directories other than the one they chose. This can let an attacker put unwanted files in parts of the system they shouldn't access, potentially disrupting operations or exposing data. Update Cloudreve to version 4.16.1 or later, or apply any available patches, and limit user permissions where possible.

What to do
  • Update cloudreve cloudreve to version 4.16.1 or later.
Affected software
VendorProductAffected versions
cloudreve cloudreve < 4.16.1
Original advisory text
Cloudreve before 4.16.1 Path Traversal via Remote Download
Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination directory. Attackers can exploit path traversal sequences in downloader metadata to write files to unexpected locations within accessible namespaces.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.3 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published27 Sep 2026
Updated19 Oct 2026
First seen27 Sep 2026
Sources
CVE-2026-101051 · NVD
CVE-2026-101051 · MITRE
Track software like this
Free during beta