CVE-2026-55498

Deferred Deferred - Pending Action

Symbolic Link Following in FileRise File Manager

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: GitHub, Inc.

Description

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folder to a sibling directory under the upload root. An unauthenticated holder of a valid share token can use shared-folder listing, direct download, or ZIP creation to access files outside the folder that was actually shared. The flaw occurs because the affected shared-folder paths resolve symlinks without enforcing the original shared folder as the real-path boundary. This issue is fixed in version 3.15.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-55498

EUVD

EUVD-2026-101626

Affected Vendors & Products

Vendor	Product	Version / Range
error311	FileRise	< 3.15.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

FileRise is a self-hosted file manager. A vulnerability in versions before 3.15.0 allows unauthenticated users with a valid shared-folder link to access files outside the intended shared folder by exploiting symbolic links. The issue occurs when a shared folder contains a symlink pointing to another directory under the FileRise upload root. The application resolves these paths without enforcing the original shared folder as a boundary, allowing access to sibling directories.

Detection Guidance

To detect this vulnerability, check if your FileRise instance is running a version prior to 3.15.0. Use commands like 'curl -s https://your-file-rise-instance.com/ | grep -i version' or inspect the software version via package managers. Verify if shared folders with subfolder browsing enabled contain symbolic links pointing outside the shared directory.

Impact Analysis

An attacker could access sensitive files outside the shared folder, potentially exposing confidential data. This includes files in other user directories or system files if the upload root overlaps with restricted areas. The impact is limited to files under the FileRise upload root but could lead to data leaks or unauthorized access depending on the exposed files.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by allowing unauthorized access to personal or health data. Unintended exposure of sensitive files may result in data breaches, leading to legal penalties, reputational damage, and loss of trust. Organizations using FileRise must ensure proper access controls to meet regulatory standards.

Mitigation Strategies

Immediately upgrade FileRise to version 3.15.0 or later. Disable shared-folder subfolder browsing if not required. Review shared folder configurations to ensure no symlinks point outside intended directories. Monitor for unauthorized access attempts in logs.

Hi! I’m here to help you understand CVE-2026-55498. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70