Information exposure via unauthenticated share access in filebrowser (CVE-2026-46410)

An unauthenticated user can access shared content in a way that exposes sensitive information, including source and path details. This vulnerability allows unauthorized parties to obtain data that should be protected, posing a confidentiality risk. Affected versions: - <= 1.3.1-stable - <= 1.4.0-beta We recommend updating to: 1.3.2-stable, 1.4.1-beta. CVSS 8.7 · our assessment: this_week Reference: https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-3jmg-p96m-m328 Details: https://vuln.today/cve/CVE-2026-46410