CVE-2026-62664

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.19.0

Description An authenticated low-privileged user with a valid CSRF token and create or owner permission on the parent can create directories outside the UPLOAD DIR wherever the web-server account has write permissions. This occurs because the application validates the complete folderName string but fails to reject dot-dot path segments before the createFolder() function constructs and creates the destination. The issue is triggered via the POST '/api/folder/createFolder.php' endpoint.

Recommendations Update to version 3.19.0.