Live › vulnerability › CVE-2026-117469
Go to dashboardPsono Server 1.0.0 through 7.2.3 does not check whether a file-transfer credential is meant for download or upload. An authenticated user with read-only access to a file can use a download credential at the upload endpoint, letting them write or overwrite repository objects and use up storage.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 06:25 UTC. All times on this page are UTC.
Teams that self-host Psono Server (Community or Enterprise) in the affected range 1.0.0 through 7.2.3 and let users share files through it. Exposure requires an account with read-only access to a shared file. Installations outside this version range, or without file-repository sharing in use, are unlikely to be affected.
No product ranges from the sources yet.
7.2.3 once a fixed release is confirmed (sources do not name one).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download transfer to the upload endpoint, obtain a signed upload URL for an attacker-selected object key, and append a chunk to the owner's file. Exploitation could upload or overwrite repository objects and consume storage, subject to transfer size, chunk-count, and lifetime limits.
This page as .md · .json · in your agent: get_signal("CVE-2026-117469")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.