File Management Software Vulnerability in File Browser by File Browser
CVE-2025-52995
What is CVE-2025-52995?
The File Browser application allows users to manage files within a designated directory. However, prior to version 2.33.10, there is an issue with the implementation of the allowlist that permits unauthorized execution of shell commands. This vulnerability arises from inadequate scope separation at the operating system level, potentially allowing an attacker to access all files managed by the application, including its database. The impact varies based on server configurations and the binaries present, making it crucial for users to upgrade to the patched version to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
filebrowser < 2.33.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
