CVE-2026-55502 | Cloudreve up to 4.16.x OAuth Signin signin app_id privileges management

July 31, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Cloudreve up to 4.16.x. Impacted is an unknown function of the file /api/v4/admin/policy/oauth/signin of the component OAuth Signin Handler. Executing a manipulation of the argument app_id can lead to improper privilege management.

The identification of this vulnerability is CVE-2026-55502. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More