CVE Daily

CVE-2025-53826

File Browser provides a file managing interface within a specified directory and...

Critical CVSS 9.8

Overview

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of publication, no known patches exist.

CWE: CWE-305 Published: 2025-07-15T18:15:24.127
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: jwt (tag impact: LOW)

Recommended actions:

  • Use strong algorithms (HS256/RS256), rotate secrets, short expiries.

Recommended tools

Tags