PT-2026-49332

CVE-2026-50891

Published

2026-06-15

Updated

2026-09-04

CVSS 3.1

8.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Filestash version 0.4.0

Description Incorrect access control in the '/admin/api/config' endpoint allows attackers to escalate privileges by sending a crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-RCQF-CPV9-G5JF

GO-2026-6300

OPENSUSE-SU-2026:21761-1

SUSE-SU-2026:23625-1

Found an issue in the description? Have something to add? Feel free to write us 👾