CVE-2026-50891

8th percentile - higher than 8% of all known CVEs

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

The organization may be exposed to unauthorized access to sensitive administrative functions, potentially leading to serious security breaches.

It is recommended to update Filestash to the latest version to mitigate this vulnerability and review access policies for administrative components.