Auth bypass in Linqi Gmbh

CVE-2026-11345

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorrectly grants access if an 'AnonFile' quer…

Vulnerability class: Broken Authentication

EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.