Openlistteam

7 CVEs in 1 Openlistteam product, including Openlist. Newest: CVE-2026-102663 (2026-10-12). Severity, EPSS and public exploits for each.

Openlistteam products with known CVEs

ProductCVEs
Openlist7
Openlistteam CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-102663Medium4.32026-10-12OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a non-separator-aware strings.HasPrefix c…
CVE-2026-75602Medium6.52026-09-03OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/add_offline_download with tool…
CVE-2026-69160Medium6.52026-08-18OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasP…
CVE-2026-73509High7.62026-08-13OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batch_rename handler in server/handles/fsbatch.go author…
CVE-2026-25060High8.12026-02-02OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The T…
CVE-2026-25059High8.82026-02-02OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in…
CVE-2025-50183Medium6.52025-06-19OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application…