VULNRABLE / Vulnerability / CVE-2026-55502

CVE-2026-55502

HIGH LOW github.com/cloudreve/Cloudreve/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
8
Severity
HIGH
EPSS
Source
GHSA

Summary

Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials

What this means

CVE-2026-55502 is a high-severity vulnerability affecting github.com/cloudreve/Cloudreve/v4, rated CVSS 8. Published July 25, 2026.

View full advisory at GHSA →