Filestash allows attackers to escalate privileges via sending a crafted request

ALTO 8.1CVE-2026-50891 · GHSA-rcqf-cpv9-g5jf · GO-2026-6300 · Published 15/06/2026 · updated 17/06/2026

In breve

CVE-2026-50891 è una vulnerabilità ALTO (CVSS 8.1) che riguarda github.com/mickael-kerjean/filestash.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 25.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
github.com/mickael-kerjean/filestash Go	`≤ 0.2.2-0.20260827111952-cbcd1e96ebc7all versions`	No fix yet

Description

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

NVD description

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

References

nvd.nist.gov/vuln/detail/CVE-2026-50891 · ADVISORY
gist.github.com/pyuysig/50dc365f54f95396bb67532f02b34bb0 · WEB
mickael-kerjean/filestash · PACKAGE
GitHub Advisory GHSA-rcqf-cpv9-g5jf · ADVISORY

Altre vulnerabilità di github.com/mickael-kerjean/filestash

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/mickael-kerjean/filestash

≤ 0.2.2-0.20260827111952-cbcd1e96ebc7all versions

No fix yet

Description

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

NVD description

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

Altre vulnerabilità di github.com/mickael-kerjean/filestash

Vedi tutto →