Authorization Bypass in Ninja Team Filebird Plugin

CVE-2025-26977

Summary

A vulnerability in Ninja Team's Filebird plugin allows an authorization bypass due to incorrectly configured access control security levels. This flaw enables attackers to manipulate user-controlled keys, potentially gaining unauthorized access to sensitive areas of the application. Affected versions include Filebird from n/a through 6.4.2.1. Ensuring that the appropriate access controls are configured is critical in mitigating the risks associated with this vulnerability.

References