EUVD-2026-115900Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessLocate exposed Foxel ≤2.4.0 instance
-
DeliverySend unauthenticated GET to /api/fs/stream or /api/fs/thumb
-
ExploitSupply VFS mount prefix and relative path
-
ExecutionReceive full file contents bypassing PathRule
-
ImpactExfiltrate files across all mounts
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | No special conditions - remote unauthenticated exploitation against default configurations of Foxel (DrizzleTime/Foxel) through version 2.4.0. The /api/fs/stream and /api/fs/thumb endpoints were served without any authentication dependency or path-permission check, so an attacker only needs network reachability to the instance and knowledge or guessing of a VFS mount prefix and relative path. The only limiting factor is network exposure of the Foxel API; there is no required authentication, user interaction, or non-default setting. The complete fix is upgrading to the patched version, which enforces a Bearer token and READ permission on these endpoints. |
| Impact | This is a genuine high-priority issue rather than a CVSS-inflated one. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) describes network-reachable, low-complexity, fully unauthenticated access with no user interaction, and the vendor commit (73d9fa8) corroborates the mechanism: the /api/fs/stream and /api/fs/thumb handlers in domain/virtual_fs/api.py lacked both the get_current_active_user dependency and the @require_path_permission(PathAction.READ) decorator, which the patch adds. High confidentiality impact (VC:H) with no integrity or availability impact (VI:N/VA:N) matches an unauthenticated arbitrary-file-read that bypasses PathRule permission grants across all VFS mounts. The exploitation status is 'no public exploit identified at time of analysis' - no KEV listing and no EPSS score are present in the input, so widespread automated exploitation is not confirmed; EPSS is simply missing (absence is not a low score). The vuln.today decision label is 'this_week', consistent with a serious but not actively-exploited flaw. The main risk amplifier is that the vulnerable endpoints are trivially scriptable and the fix is purely a missing access-control check, so reliable exploitation requires no special technique. |
| Exploit ScenarioDerived | An attacker who can reach a Foxel instance (version ≤2.4.0) over the network sends an unauthenticated GET to /api/fs/stream or /api/fs/thumb, supplying a VFS mount prefix and a relative path. The server returns the full file contents (or a thumbnail) for any file across any mount, ignoring PathRule permission grants, enabling bulk exfiltration of stored files. No public working exploit code is identified in the input, but the single-request nature of the flaw makes it straightforward to script. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 03, 2026
Foxel through 2.4.0 exposes its virtual filesystem read endpoints, /api/fs/stream and /api/fs/thumb, without any authentication dependency or per-path permission check, so an unauthenticated remote attacker who can reach the instance can retrieve full file contents or generated thumbnails by supplying a VFS mount prefix and a relative path - even for paths that PathRule grants never authorized. The upstream fix commit 73d9fa8 adds a Bearer-token requirement plus a READ path-permission decorator to both handlers and replaces raw stream URLs in the web client with short-lived signed links, and the issue is assessed as a genuine high-priority unauthenticated data-disclosure flaw rather than a CVSS-inflated one. No CISA KEV listing and no public exploit code were identified at time of analysis, though the endpoints are trivially reachable by any client that can perform an HTTP GET, so the practical limiter is network exposure of the Foxel API rather than any attacker prerequisite.
RemediationAI
Patch status is vendor-released: the fix is in commit 73d9fa825e1004d37abb7b10faea0cd7f5bcb463 (https://github.com/DrizzleTime/Foxel/commit/73d9fa825e1004d37abb7b10faea0cd7f5bcb463), which adds the get_current_active_user dependency and require_path_permission(PathAction.READ, "full_path") to both the /api/fs/stream and /api/fs/thumb handlers; the upstream advisory states that updating is the complete fix, so upgrade any Foxel instance at or below 2.4.0 to a build containing that commit (no exact tagged release number is stated in the available data - verify against the project repository at https://github.com/DrizzleTime/Foxel and issue https://github.com/DrizzleTime/Foxel/issues/152). Note for plugin and frontend maintainers: the patched client-side SDK changes getStreamUrl to return a Promise<string> backed by a temporary signed URL valid for roughly one hour, so plugins calling it must await the result before assigning it to a media element. Until the upgrade is applied, the only stated limiting factor is network exposure of the Foxel API, so restrict reachability of /api/fs/stream and /api/fs/thumb to trusted networks or place the instance behind an authenticating reverse proxy - a compensating control that reduces exposure but does not close the missing authorization check and may interfere with clients that fetch media directly. Upgrade should be scheduled this week given the unauthenticated nature of the disclosure. Full advisory: https://www.vulncheck.com/advisories/foxel-through-2.4.0-unauthenticated-file-read-via-api-fs-stream-and-api-fs-thumb.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Foxel (DrizzleTime/Foxel) is a Python web application whose API is wired up in api/routers.py and whose virtual filesystem logic lives in domain/virtual_fs/api.py; a VFS layer presents configured mounts under user-visible prefixes, and per-path PathRule grants are supposed to gate read actions. The flaw is CWE-306 (Missing Authentication for Critical Function): the get_file/thumbnail and stream_response handlers at domain/virtual_fs/api.py lines ~164-182 were routed without get_current_active_user or the require_path_permission(PathAction.READ, ...) decorator, so the endpoints functioned as an open file-read service keyed only on the caller-supplied mount prefix plus relative path, entirely bypassing the authorization layer that PathRule is meant to enforce. The patch commit 73d9fa825e1004d37abb7b10faea0cd7f5bcb463 adds both the authenticated-user dependency and the PathAction.READ permission check to the thumbnail and stream handlers, sets Cache-Control: private, no-store on the responses, and reworks the frontend (web/src/api/vfs.ts, FileThumbnail.tsx, useThumbnails.ts, plugin-frame.ts, plugins/sdk/v1.ts) so native media elements fetch through a temporary signed link token instead of an unauthenticated bearer-less URL - the SDK README notes those signed URLs grant access to one file for about one hour by default. The affected product identifier is cpe:2.3:a:drizzletime:foxel:*:*:*:*:*:*:*:* with all versions through 2.4.0 in scope.
Know when Foxel gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Unauthenticated network request reads arbitrary files across all mounts (PR:N, AV:N, AC:L, C:H); no write or availability impact (I:N/A:N) and no scope change.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full file contents or thumbnails across all mounts, bypassing PathRule permission grants.
Executive ViewAI
Foxel, a file management platform used for virtual filesystem access, has a high-severity flaw that allows unauthenticated attackers to read any stored file-including those with restricted permissions-by simply sending a web request. This affects all Foxel deployments up to version 2.4.0 that are reachable from untrusted networks, potentially exposing sensitive organizational data. Leadership should prioritize remediation because the attack requires no credentials and could lead to a significant data breach.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
Vulnrichment
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Exploit-DB