VULNRABLE / Vulnerability / CVE-2026-55495

CVE-2026-55495

MEDIUM LOW github.com/cloudreve/Cloudreve/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
Source
GHSA

Summary

Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

What this means

CVE-2026-55495 is a medium-severity vulnerability affecting github.com/cloudreve/Cloudreve/v4, rated CVSS 5.5. Published July 25, 2026.

View full advisory at GHSA →