CVE-2026-55667 - File Browser symlink-following cleanup allows create-only users to delete out-of-scope files - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

GHSA-fmm7-x4gx-8jhr

By Yuval Cohen |

25 June 2026

CVE-2026-55667 – File Browser symlink-following cleanup allows create-only users to delete out-of-scope files

`github.com/filebrowser/filebrowser/v2