CVE-2026-46410: Gtsteffaniak Filebrowser

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available.

Affected products

• Gtsteffaniak Filebrowser: before 1.3.2-stable (fixed in 1.3.2-stable); before 1.4.1-beta (fixed in 1.4.1-beta)

Published 2026-07-20. Last modified 2026-07-22.