Live › vulnerability › CVE-2026-111655
Go to dashboardThe think-plugs-admin plugin for ThinkAdmin through 1.0.81 lets non-super administrators access file records by id through admin/file.edit without ownership checks. An attacker with that permission can view download URLs, tamper with records, or reassign file ownership.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running ThinkAdmin with the think-plugs-admin plugin at or below 1.0.81 where some administrator accounts are not super administrators and hold the admin/file.edit permission. Installations that only use super administrators, or that do not grant file.edit to other roles, are less exposed.
No product ranges from the sources yet.
1.0.81admin/file.edit nodeUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with columns like xurl, hash, or uuid to view download URLs, tamper records, or reassign ownership.
This page as .md · .json · in your agent: get_signal("CVE-2026-111655")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.