CVE-2026-92616: FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance
FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attackers to gain unauthorized read and write access by exploiting improper session isolation between the WebDAV interface and the web application session context. Attackers can combine valid Basic-Auth credentials with an active admin PHPSESSID cookie to bypass authorization boundaries, as the WebDAV layer incorrectly inherits elevated privileges from an ambient web session rather than enforcing independent stateless authentication per RFC 4918.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FileRiseto a version that resolves this vulnerability.Fixed in 3.28.0Patch FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance
Event History
Frequently Asked Questions
What conditions are required to exploit this issue?
An attacker needs valid low-privilege Basic-Auth credentials and access to an active administrator PHPSESSID cookie. The attack uses the WebDAV interface together with that ambient administrative web session.
What access could an attacker gain?
A successful attacker can obtain unauthorized read and write access by causing the WebDAV layer to inherit elevated privileges from the administrator session.
Which deployments should be prioritized for remediation?
Prioritize FileRise deployments that expose or use WebDAV and have versions earlier than 3.28.0. The issue requires both authenticated low-privilege access and an active administrator session cookie.
What version resolves the vulnerability?
FileRise 3.28.0 is identified as the release boundary for this issue; versions before 3.28.0 are affected.