CVE-2026-54562 | Cloudreve up to 4.16.0 Remote Download Workflow download urls redirect

July 15, 2026 Yanac

A vulnerability was found in Cloudreve up to 4.16.0 and classified as problematic. This impacts the function Download of the file /api/v4/workflow/download of the component Remote Download Workflow. The manipulation of the argument urls results in open redirect.

This vulnerability was named CVE-2026-54562. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More