EUVD-2026-86466

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...

CVE-2026-93353: Improper Link Resolution Before File Access

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...

PT-2026-98301

Name of the Vulnerable Software and Affected Versions copyparty affected versions not specified Description The SFTP front end contains a volume restriction bypass that allows authenticated users to create, remove, and truncate arbitrary paths outside permitted volume boundaries. This occurs...