Arbitrary Regex Vulnerability in Copyparty File Server

CVE-2025-54796

What is CVE-2025-54796?

Copyparty, a portable file server, is exposed to a vulnerability where the filter parameter on the 'Recent Uploads' page allows for the use of arbitrary regular expressions. If this feature is activated, an attacker can exploit it by providing a crafted filter that leads to a deadlock situation within the server. This issue has been addressed in version 1.18.9, which includes necessary mitigations to prevent such denial of service scenarios.

References