CVE-2026-94533

Name of the Vulnerable Software and Affected Versions lamp-cloud versions prior to 5.10.1

Description An authorization bypass exists in the FileAnyoneController that allows authenticated users to download arbitrary attachments. By providing valid attachment identifiers to the '/anyone/file/down' and '/anyone/file/download' endpoints, attackers can retrieve files stored by other users because the application fails to validate file ownership against the created by column.

Recommendations Update lamp-cloud to a version newer than 5.10.0. Restrict access to the '/anyone/file/down' and '/anyone/file/download' endpoints to minimize the risk of unauthorized file retrieval.