EUVD-2026-67259
GHSA-g5hf-q3px-mccp
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description requires an authenticated account with the 'rename' permission, so PR:L not PR:N; simple remote POST yields full admin takeover (C/I/A:H).
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming the application configuration file and triggering a rebuild of configuration and resetting super administrator credentials to default values.
AnalysisAI
Privilege escalation in Veno File Manager 4.4.9 lets an authenticated user holding only the 'rename' permission take over the super administrator account. By sending a crafted POST request to the renameFile endpoint, the attacker renames the application configuration file, which forces the app to rebuild its configuration and reset super-admin credentials to default values. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated Veno File Manager 4.4.9 account that has been granted the 'rename' permission - this is the exact prerequisite named in the description, so exploitation is NOT possible against a default anonymous/unauthenticated visitor. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The input CVSS is 9.8 with vector AV:N/AC:L/PR:N/UI:N, but this conflicts with the description, which explicitly requires 'an authenticated attacker with rename permission.' PR:N (unauthenticated) is therefore inconsistent with the stated prerequisite of an existing authenticated account with a granted permission - this should be PR:L, lowering the realistic base score to roughly 8.8. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released fixed version is identified in the provided data - upgrade to a patched Veno File Manager release once the vendor publishes one (monitor http://veno.com and the NVD advisory https://nvd.nist.gov/vuln/detail/CVE-2026-37071). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Veno File Manager 4.4.9 deployments and immediately restrict rename permissions to administrators only, disabling access for unnecessary users. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today