CVE-2026-62664

The FileRise self-hosted web-based file manager is vulnerable to an authenticated path traversal flaw in the createFolder function. Prior to version 3.19.0 , the system validates the folderName string but fails to reject dot-dot path segments . This allows an authenticated low-privileged user wit...