What is the CVSS score of EUVD-2026-14994?

EUVD-2026-14994 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Filerise are affected by EUVD-2026-14994?

CVE-2026-33330 is a broken access control vulnerability in FileRise's ONLYOFFICE integration that allows authenticated read-only users to overwrite files with malicious content by spoofing save…. A patch is available.

How to fix or mitigate EUVD-2026-14994?

Within 24 hours: Inventory all FileRise deployments and document current versions. Within 7 days: Upgrade FileRise to version 3.10.0 or later across all production environments. Within 30 days: Audit file modification logs for the past 90 days to detect suspicious callback activity or unauthorized overwrites; review access control assignments for read-only accounts to ensure proper privilege boundaries.

Filerise EUVD-2026-14994

| CVE-2026-33330 HIGH

Incorrect Authorization (CWE-863)

2026-03-24 GitHub_M

Authentication Bypass Filerise Error311

7.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:17 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

3.10.0

EUVD ID Assigned

Mar 24, 2026 - 19:30 euvd

EUVD-2026-14994

Analysis Generated

Mar 24, 2026 - 19:30 vuln.today

CVE Published

Mar 24, 2026 - 19:15 nvd

HIGH 7.1

DescriptionGitHub Advisory

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save callback to overwrite that file with attacker-controlled content. This issue has been patched in version 3.10.0.

AnalysisAI

A broken access control vulnerability in FileRise's ONLYOFFICE integration allows authenticated users with read-only permissions to overwrite files with malicious content by forging ONLYOFFICE save callbacks using legitimately obtained signed callbackUrls. FileRise versions prior to 3.10.0 are affected. There is no evidence of active exploitation (not in CISA KEV), but proof-of-concept details are available through the GitHub Security Advisory GHSA-6c3j-f4x4-36m3.

Technical ContextAI

FileRise (cpe:2.3:a:error311:filerise:*:*:*:*:*:*:*:*) is a self-hosted web file manager with WebDAV server functionality and ONLYOFFICE document editor integration. The vulnerability stems from CWE-863 (Incorrect Authorization), where the application fails to properly validate whether a user has write permissions when processing ONLYOFFICE save callbacks. The ONLYOFFICE integration uses signed callbackUrls to enable document saving after editing, but the implementation does not verify that the user who obtained the signed URL actually has write access to the target file. An attacker can request a legitimate signed callbackUrl while having read-only access, then craft a malicious HTTP request mimicking an ONLYOFFICE save callback to bypass access controls and overwrite the file content.

RemediationAI

Upgrade FileRise to version 3.10.0 or later, which contains the patch for this broken access control issue. The fix is available at https://github.com/error311/FileRise/releases/tag/v3.10.0, and implementation details can be reviewed in commit https://github.com/error311/FileRise/commit/3871f9fd1661688bed4f7dd23912be0ebf50973c. Until patching is completed, organizations should consider temporarily disabling ONLYOFFICE integration if it is not critical to operations, review and restrict user authentication to trusted accounts only, implement network segmentation to limit access to the FileRise instance, and audit file access logs for suspicious save callback requests from users who should only have read-only permissions. Review user permission assignments to ensure least privilege access is enforced.