EUVD-2026-29878
GHSA-9682-24hm-2gh4
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionNVD
A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host. This issue is fixed in FileMaker Cloud 2.22.0.5.
AnalysisAI
Authenticated administrators with Admin Console access to FileMaker Cloud can execute arbitrary operating system commands on the underlying host by bypassing front-end restrictions on OS Script schedule types. This vulnerability affects all FileMaker Cloud versions prior to 2.22.0.5 and requires high-privilege administrative credentials to exploit. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Verify current FileMaker Cloud deployment version and inventory all accounts with Admin Console access. Within 7 days: Upgrade FileMaker Cloud to version 2.22.0.5 or later; simultaneously review Admin Console access logs for suspicious activity and audit admin credential usage patterns. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today