CVE-2026-104110

Deferred Deferred - Pending Action

Unauthenticated Portal Data Exposure in FileRise

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: GitHub, Inc.

Description

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured client portal's full internal record to an unauthenticated caller who knows or guesses the portal slug. The response includes the internal storage folder path, client contact email, form settings, and upload-policy details, while the separate publicMeta.php endpoint intentionally exposes only curated branding data. Exploitation requires the Pro add-on and at least one configured portal. This issue is fixed in version 3.24.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-15

AI Q&A

2026-10-15

EPSS Evaluated

N/A

NVD

CVE-2026-104110

Affected Vendors & Products

Vendor	Product	Version / Range
error311	FileRise	< 3.24.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

FileRise is a self-hosted file manager. Before version 3.24.0, an unauthenticated attacker could access sensitive portal details by querying /api/pro/portals/get.php if they knew the portal slug. This included internal storage paths, client emails, and upload policies.

Detection Guidance

Check FileRise Pro version for anything below 3.24.0. Inspect network traffic for requests to /api/pro/portals/get.php without authentication. Look for exposed portal slugs in logs or configuration files.

Impact Analysis

An attacker could gather internal system details, client contact information, and storage paths. This may lead to further attacks like unauthorized access or data leaks if combined with other vulnerabilities.

Compliance Impact

Exposure of client emails and internal paths could violate GDPR (data protection) or HIPAA (privacy). Unauthorized data access risks non-compliance with these regulations.

Mitigation Strategies

Upgrade FileRise Pro to version 3.24.0 or later. If using the Pro add-on, verify no unauthenticated access is possible to /api/pro/portals/get.php. Review and restrict portal slug exposure.

Hi! I’m here to help you understand CVE-2026-104110. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70