Skip to content
Threat Feed
Subscribe

Product

Directus

1 brief RSS
high advisory

Directus File Overwrite Vulnerability (CVE-2026-39942)

A file overwrite vulnerability (CVE-2026-39942) exists in Directus versions prior to 11.17.0, where an attacker can overwrite another user's files by manipulating the filename_disk parameter in the PATCH /files/{id} endpoint, potentially leading to data corruption or privilege escalation.

Directus file-overwrite privilege-escalation CVE-2026-39942
2r 2t 1c