CVE-2026-46410

Description

### Impact Some sensitive info -- such as source and path can get exposed. ### Patches Update to the latest version ### Workarounds no

How to fix CVE-2026-46410

To remediate CVE-2026-46410, upgrade the affected package to a fixed version below.

• Go/github.com/gtsteffaniak/filebrowser—upgrade to 1.2.1-stable.0.20260514154726-1802e1281135 or later
• Go/github.com/gtsteffaniak/filebrowser/backend—upgrade to 0.0.0-20260514154726-1802e1281135 or later

Is CVE-2026-46410 being exploited?

No exploitation signal available. Neither CISA KEV nor a current EPSS score has been published for CVE-2026-46410.

Affected packages (2)

• from 0, < 1.2.1-stable.0.20260514154726-1802e1281135
• from 0, < 0.0.0-20260514154726-1802e1281135

CVSS scores

References (3)

• PATCHgithub.com/gtsteffaniak/filebrowser
• WEBgithub.com/gtsteffaniak/filebrowser/commit/1802e1281135cba83eb4acd86b58293fe121e2a5
• WEBgithub.com/gtsteffaniak/filebrowser/security/advisories/GHSA-3jmg-p96m-m328