Skip to content
Threat Feed
Subscribe

Vendor

Cloudreve

3 briefs RSS
high advisory

Cloudreve WebDAV Path Traversal Vulnerability

A path traversal vulnerability in Cloudreve's WebDAV handler allows attackers with scoped credentials to escape their designated folder and perform unauthorized operations across the entire user namespace.

Cloudreve v3 +1 path-traversal webdav cve-2026-54563
1r 1t 1c
high advisory

Cloudreve OAuth Admin.Read Scope Bypass for OneDrive Storage Policy Credential Update (CVE-2026-55502)

An authorization bypass vulnerability (CVE-2026-55502) in Cloudreve 4.16.1 allows an attacker with an `Admin.Read` OAuth token to modify the OneDrive storage policy credentials via a POST request to `/api/v4/admin/policy/oauth/signin`, despite lacking `Admin.Write` scope, which can break the storage backend and redirect future OAuth setups.

Cloudreve +1 authorization-bypass oauth web-vulnerability credential-manipulation
1r 1t
high advisory

Cloudreve OAuth Access Token Scope Bypass Vulnerability

Cloudreve's OAuth implementation contains a vulnerability, CVE-2026-54560, where OAuth access tokens bypass intended scope enforcement due to a missing `client_id` claim, allowing an attacker with a low-scope token to access sensitive APIs requiring higher privileges, effectively leading to privilege escalation.

Cloudreve oauth vulnerability privilege-escalation web-application
1t 1c