Back to list

FileBrowser Quantum: unauthenticated user share share info — CVE-2026-46410

GitHub · GitHub · CVE-2026-46410

ID
CVE-2026-46410
Date
Activity
Source
GitHub
Vendor
GitHub
Threat
high
CVSS
8.7

Summary

### Impact Some sensitive info -- such as source and path can get exposed. ### Patches Update to the latest version ### Workarounds no

Product

go: github.com/gtsteffaniak/filebrowser/backend | go: github.com/gtsteffaniak/filebrowser

What to do

General, cautious steps (verify details in the official source):

  • Prioritize patching or mitigation immediately (treat as actively risky).
  • Identify affected product versions in your inventory and verify whether you are impacted.
  • Apply vendor patches/updates or recommended mitigations as soon as available.
  • Read the official advisory for exact affected versions and remediation steps.

Official advisory

Related advisories