Authentication Bypass Vulnerability in FileRise File Manager

CVE-2026-57489

What is CVE-2026-57489?

FileRise, a web-based file manager, is susceptible to an authentication bypass vulnerability when proxy-header authentication is enabled and the backend application is directly accessible. This flaw allows unauthenticated attackers to exploit the reverse-proxy identity header, potentially gaining access to user sessions, including those of administrators, without any password or multi-factor authentication. The issue is confined to deployments that do not verify incoming requests from trusted proxies. The vulnerability has been addressed in version 3.16.0, thus it is essential to upgrade to this version for enhanced security. For more details on the fix, refer to the provided links.

References