CVE-2026-55502

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and app_id values, allowing an OAuth token without Admin.Write to modify storage policy credentials. The route is inside the admin group that requires Admin.Read, but it does not add the local Admin.Write guard used by sibling policy mutation routes. Its handler persists attacker-supplied secret and app_id values into the selected OneDrive storage policy before returning an OAuth URL. This issue is fixed in version 4.17.0.

• CWE-863

• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-hq88-5x99-x3gf
• https://github.com/cloudreve/cloudreve/security/advisories/GHSA-hq88-5x99-x3gf

Published

Jul 31, 2026

Last Modified

Jul 31, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55496Cloudreve is a self-hosted file management and sharing syste…4.3
• CVE-2026-55497Cloudreve is a self-hosted file management and sharing syste…6.5
• CVE-2026-55499Cloudreve is a self-hosted file management and sharing syste…4.3
• CVE-2026-5550A vulnerability was identified in Tenda AC10 16.03.10.10_mul…8.8
• CVE-2026-555009Router is an AI router & token saver. Prior to 0.4.80, the …9.9
• CVE-2026-555019Router is an AI router & token saver. Prior to 0.4.80, the …7.3
• CVE-2026-5551A security flaw has been discovered in itsourcecode Free Hot…7.3
• CVE-2026-55510ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-55514vLLM is a library for LLM inference and serving. From 0.12.0…6.5
• CVE-2026-55515Snipe-IT is an IT asset/license management system. Prior to …5
• CVE-2026-55516Snipe-IT is an IT asset/license management system. Prior to …7.7
• CVE-2026-55517Deno is a JavaScript, TypeScript, and WebAssembly runtime. P…4.3