CVE-2026-55496

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActive without adding a StatusActive predicate and serializes matches at RedactLevelUser, allowing any logged-in user to enumerate email addresses and profile metadata for inactive or banned accounts. The service calls userClient.SearchActive, but despite its name that method filters only by email/nickname keyword and never adds a StatusActive predicate — while the sibling lookups GetActiveByID and GetActiveByDavAccount, defined a few lines above it, do. Search hits are serialized at RedactLevelUser, which includes the email address. This issue is fixed in version 4.17.0.

• CWE-200
• CWE-359

• https://github.com/cloudreve/cloudreve/commit/7e1289d552794bdbeb551be78456115c87dcb3da
• https://github.com/cloudreve/cloudreve/releases/tag/4.17.0
• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-8r7f-r8hj-r3rv
• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-8r7f-r8hj-r3rv

Published

Jul 31, 2026

Last Modified

Jul 31, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55481Snipe-IT is an IT asset/license management system. Prior to …4.8
• CVE-2026-55487pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the …8.8
• CVE-2026-55488motionEye (mEye) is an online interface for a piece of softw…7.7
• CVE-2026-5549A vulnerability was determined in Tenda AC10 16.03.10.10_mul…7.5
• CVE-2026-55490OpenWrt is a Linux operating system targeting embedded devic…6.5
• CVE-2026-55495Cloudreve is a self-hosted file management and sharing syste…4.3
• CVE-2026-55497Cloudreve is a self-hosted file management and sharing syste…6.5
• CVE-2026-55499Cloudreve is a self-hosted file management and sharing syste…4.3
• CVE-2026-5550A vulnerability was identified in Tenda AC10 16.03.10.10_mul…8.8
• CVE-2026-555009Router is an AI router & token saver. Prior to 0.4.80, the …9.9
• CVE-2026-555019Router is an AI router & token saver. Prior to 0.4.80, the …7.3
• CVE-2026-55502Cloudreve is a self-hosted file management and sharing syste…7.1