VULNRABLE / Vulnerability / GHSA-v6w6-358x-2433

GHSA-v6w6-358x-2433

MEDIUM LOW github.com/cloudreve/Cloudreve/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
Source
GHSA

Summary

Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests

What this means

GHSA-v6w6-358x-2433 is a medium-severity vulnerability affecting github.com/cloudreve/Cloudreve/v4, rated CVSS 5.5. Published July 25, 2026.

View full advisory at GHSA →