Authentication Bypass in Cloudreve by Qingdao Cloudreve

CVE-2026-101056

What is CVE-2026-101056?

Cloudreve versions prior to 4.16.1 exhibit a flaw that allows malicious actors to bypass authentication under specific conditions. The vulnerability arises when the application fails to effectively revalidate share access while restoring cached navigator states associated with context_hint UUIDs. This lapse enables attackers—who had previously received valid share access—to replay cached hints, thereby generating signed file URLs for a window of up to 300 seconds post-deletion, expiration, or depletion of download counts for shared links.

References