CVE-2024-9333: M-Files Corporation M-Files Connector For Copilot

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation

Affected products

• M-Files Corporation M-Files Connector For Copilot: before 24.9.3 (fixed in 24.9.3)

Published 2024-10-02. Last modified 2026-06-17.