EUVD-2026-86466

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...

CVE-2026-93353

The copyparty SFTP front end contains a volume restriction bypass vulnerability. Authenticated SFTP users can create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three specific handlers: _mkdir , _rmdir , and _chattr . The root cause is that these handle...