CVE-2022-4270: M-Files Server

Low severity, CVSS 2.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.

Affected products

• M-Files M-Files Server: before 22.5.11436.1 (fixed in 22.5.11436.1)

Published 2022-12-02. Last modified 2026-06-17.