EUVD-2026-42652
GHSA-xf6h-j6rm-x673
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Admin-only access retains PR:H; RCE on host OS from application-level admin constitutes scope change (S:C), with full C/I/A impact.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.
AnalysisAI
Arbitrary code execution on the host operating system is achievable by an authenticated FileMaker Server administrator via a malicious file upload through the Open Source LLM setup feature - specifically the Miniforge installer upload path - in the Admin Console. All FileMaker Server versions prior to 26.0.1 are affected; the flaw is classified as CWE-434 (unrestricted upload of a dangerous file type) and was reported directly by Apple/Claris product security. No public exploit code or CISA KEV listing exists at time of analysis, and SSVC rates exploitation as none with no automation feasibility, substantially limiting real-world risk despite the RCE classification.
Technical ContextAI
FileMaker Server, developed by Claris (an Apple subsidiary), includes an Admin Console with an Open Source LLM setup feature that accepts a Miniforge installer upload - Miniforge being a minimal conda/Python environment bootstrapper used to provision local AI/ML runtimes. The upload handler fails to adequately validate or restrict the file type of the supplied binary (CWE-434: Unrestricted Upload of File with Dangerous Type), allowing a weaponized installer to be accepted and subsequently executed on the underlying host OS rather than the intended legitimate package. The attack surface is the network-accessible Admin Console (AV:N per CVSS), and the vulnerability was introduced by the expansion of FileMaker Server into AI/LLM feature territory. The EUVD advisory (EUVD-2026-42652) confirms affected versions span from 0 through all releases prior to 26.0.1. No CPE strings were provided in available data, limiting precise version enumeration.
RemediationAI
Upgrade to FileMaker Server 26.0.1, which addresses this vulnerability per the Claris vendor advisory at https://community.claris.com/en/s/article/Arbitrary-Code-Execution-Vulnerability-Addressed-in-FileMaker-Server-via-Miniforge-Installer-Upload. This is the confirmed and only authoritative fix; the patch is available per vendor advisory, reported by product-security@apple.com. If immediate patching is not feasible, restrict access to the FileMaker Server Admin Console to trusted internal IP ranges using network-layer controls such as firewall ACLs or a reverse-proxy allowlist - this reduces the network-exposed attack surface without affecting database client operations. Auditing and minimizing the number of accounts holding FileMaker Server administrator privileges is an effective compensating control, since exploitation is gated on admin credentials. If the Open Source LLM setup feature is not operationally required, consult Claris documentation to determine whether it can be disabled or restricted, as eliminating this upload path would remove the specific exploitation vector entirely; note that disabling LLM integration features may impact AI-augmented workflows in the Admin Console.
More in Filemaker Server
View allAn XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote atta
Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases ho
A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access an
Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to a
Share
External POC / Exploit Code
Leaving vuln.today