CVE-2026-30580

Publication date

2026-03-20 00:00:00

Family

mitre

State

PUBLISHED

Description

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system.