Improper Authorization in Collabora KodExplorer FileUpload Functionality

CVE-2026-6572

What is CVE-2026-6572?

A security vulnerability has been identified in Collabora KodExplorer, specifically affecting versions up to 4.52. This issue arises from a flaw in the fileUpload functionality within the share.class.php component, where improper authorization can be exploited. Malicious actors may conduct remote attacks by manipulating the fileUpload parameter, potentially leading to unauthorized access to sensitive files. While the complexity of the attack is considered high, the risk remains significant due to the potential for exploitation. Despite vendor notification regarding this vulnerability, there has been no acknowledgment or response.

References