CVE-2026-57489

HIGH 8.1

FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.

CWE	CWE-290
Vendor	error311
Product	filerise
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for error311 filerise

Be the first to know when new high vulnerabilities affecting error311 filerise are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

error311 / FileRise

< 3.16.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/error311/FileRise/security/advisories/GHSA-98pg-w3jp-r8fv github.com: https://github.com/error311/FileRise/commit/f7114ca2a4e624238dda0d097a07ad6b05c11bb6 github.com: https://github.com/error311/FileRise/releases/tag/v3.16.0