CVE-2026-109166 lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids. Attackers can send another user's file ids to the findUrlById handler of FileAnyoneController, which...

EUVD-2026-97372

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids. Attackers can send another user's file ids to the findUrlById handler of FileAnyoneController, which...

CVE-2026-109166

Versions of lamp-cloud through 5.10.1 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability (CWE-639). The root cause is located in the FileAnyoneController 's findUrlById handler, which fails to perform ownership verification. This allows authenticated users to retrieve acce...

PT-2026-110557

Name of the Vulnerable Software and Affected Versions lamp-cloud versions prior to 5.10.2 Description An insecure direct object reference occurs when an application provides direct access to objects based on user-supplied input. Authenticated users can obtain storage URLs for files belonging to...

CVE-2026-109166: Authorization Bypass Through User-Controlled Key

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbitrary file ids. Attackers can send another user's file ids to the findUrlById handler of FileAnyoneController, which...