Path Traversal Vulnerability in FileRise by Error311

CVE-2026-54414

What is CVE-2026-54414?

FileRise prior to version 3.16.0 is susceptible to a severe path traversal vulnerability in the shared-folder upload endpoint, allowing unauthorized file writing and potential administrator account takeover. The vulnerability arises from inadequate validation of the upload filename, which permits URL-encoded sequences to bypass security mechanisms. An attacker with valid access to an upload-enabled shared-folder link can exploit this weakness to overwrite sensitive files and gain unauthorized administrative access. This flaw has been addressed in version 3.16.0, which incorporates enhanced validation by rejecting path separators before processing uploads.

References