File Management Vulnerability in File Browser by File Browser

CVE-2026-54097

What is CVE-2026-54097?

A vulnerability exists in File Browser that allows a low-privileged authenticated user to maliciously delete share-link records of other users, including administrators. This occurs when the user executes a valid delete operation on a file located in their directory, which coincidentally has a prefix that matches another user's share link path. While the contents of the victim's files remain intact, the integrity of their share links is compromised as they are permanently removed. This issue was addressed in version 2.63.6.

References