CVE-2026-54562

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download and passes them to the configured downloader without blocking loopback, localhost, IPv6 localhost, or redirect-to-loopback targets, allowing a non-admin user with remote download permission to fetch internal-only URLs and read the response after it is imported into the user's own files. This issue is fixed in version 4.16.1.

• CWE-918

• https://github.com/cloudreve/cloudreve/commit/aaebf317a78f2413d74afd66c21a1f3143711312
• https://github.com/cloudreve/cloudreve/releases/tag/4.16.1
• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-x756-g4x3-c64m
• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-x756-g4x3-c64m

Published

Jul 15, 2026

Last Modified

Jul 15, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54556Http4s is a Scala interface for HTTP services. Prior to 0.23…8.2
• CVE-2026-54557mise manages dev tools like node, python, cmake, and terrafo…5.5
• CVE-2026-54559PocketSphinx is a small speech recognizer. Prior to 5.1.1, t…6.9
• CVE-2026-5456A vulnerability was identified in Align Technology My Invisa…3.3
• CVE-2026-54560Cloudreve is a self-hosted file management and sharing syste…7.6
• CVE-2026-54561MCP Memory Keeper is an MCP server for persistent context ma…6.2
• CVE-2026-54563Cloudreve is a self-hosted file management and sharing syste…7.1
• CVE-2026-54565rhwp is an HWP viewer and editor implemented in Rust and Web…4.7
• CVE-2026-54567Flask-Reuploaded provides file uploads for Flask. From 1.5.0…7.5
• CVE-2026-54568Microsoft UFO open-source framework for intelligent automati…4.3
• CVE-2026-54569SENAITE.CORE is the core framework for the SENAITE laborator…9.8
• CVE-2026-5457A security flaw has been discovered in PropertyGuru AgentNet…3.3