CVE-2026-30230

Name of the Vulnerable Software and Affected Versions Flare versions prior to 1.7.2

Description Flare, a Next.js-based file sharing platform, had a flaw where the thumbnail endpoint did not properly verify passwords for password-protected files. The system checked for ownership or administrator privileges for private files but bypassed password verification, enabling unauthorized access to thumbnails.

Recommendations Update to version 1.7.2 or later.