CVE-2026-109166 | dromara lamp-cloud up to 5.10.1 FileAnyoneController poc_findUrlById_url.py findUrlById file ids resource injection

October 12, 2026 Yanac

A vulnerability described as problematic has been identified in dromara lamp-cloud up to 5.10.1. This issue affects the function findUrlById of the file poc_findUrlById_url.py of the component FileAnyoneController. The manipulation of the argument file ids results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2026-109166. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More