CVE-2026-55495 | Cloudreve up to 4.16.x WOPI PUT_RELATIVE X-WOPI-SuggestedTarget path traversal

July 31, 2026 Yanac

A vulnerability was found in Cloudreve up to 4.16.x. It has been declared as critical. This vulnerability affects the function WOPI PUT_RELATIVE. Such manipulation of the argument X-WOPI-SuggestedTarget leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-55495. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More