File Management Software Vulnerability in File Browser by File Browser

CVE-2025-52995

What is CVE-2025-52995?

The File Browser application allows users to manage files within a designated directory. However, prior to version 2.33.10, there is an issue with the implementation of the allowlist that permits unauthorized execution of shell commands. This vulnerability arises from inadequate scope separation at the operating system level, potentially allowing an attacker to access all files managed by the application, including its database. The impact varies based on server configurations and the binaries present, making it crucial for users to upgrade to the patched version to mitigate risks.

References