CVE-2026-104108
HIGH 8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise maps an authenticated OIDC identity to a local account using mutable preferred_username or email claims and does not require email_verified for email-based naming. An attacker who can obtain provider-issued claims colliding with an existing local username can be logged in as that account, including the built-in administrator, even when automatic provisioning is disabled. Exploitability depends on the configured identity provider allowing the colliding claim. This issue is fixed in version 3.23.0.
Severe if exploited (CVSS 8.1), but no known exploitation and low modeled probability. Patch on a normal cadence.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 12th percentile
Impact if exploited
8.1CVSS 3.1 · HIGH
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ⚠Complexity: Needs a race window or specific setup
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-287: : Improper Authentication
- CWE-290: : Authentication Bypass by Spoofing
- CWE-345: : Insufficient Verification of Data Authenticity
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References and research data (JSON)
All CVSS metrics
- HIGH 8.1 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - HIGH 8.1 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/error311/FileRise/security/advisories/GHSA-c5c5-mv9m-j367 CVE record · GitHub_M · Updated 2026-10-14T20:39:27.691Z
CVE record · CISA-ADP · Updated 2026-10-20T02:11:28.127Z
NVD · CVE-2026-104108 · Updated 2026-10-20T03:17:12.480
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101686 EUVD · EUVD-2026-101686
Technical & other
- https://github.com/error311/FileRise/commit/cc1118923b522baff28dca05bdd79c27f984c68a CVE record · GitHub_M · Updated 2026-10-14T20:39:27.691Z
NVD · CVE-2026-104108 · Updated 2026-10-20T03:17:12.480 - https://github.com/error311/FileRise/releases/tag/v3.23.0 CVE record · GitHub_M · Updated 2026-10-14T20:39:27.691Z
NVD · CVE-2026-104108 · Updated 2026-10-20T03:17:12.480