{"id":"CVE-2026-121555","kind":"vulnerability","aliases":["CVE-2026-121555"],"related":[],"title":"Foxel: missing authentication lets anonymous users read any stored file","description":"Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full file contents or thumbnails across all mounts, bypassing PathRule permission grants.","summary":"Foxel through version 2.4.0 exposes its /api/fs/stream and /api/fs/thumb endpoints without requiring login. An unauthenticated attacker can supply a mount prefix and path to download full file contents or thumbnails from any mount, bypassing PathRule permissions.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["file-storage","foxel","other","self-hosted"],"not_affected_if":["not-exposed-to-network"],"how_to_check":"- Confirm the Foxel version in use; versions through `2.4.0` are listed as affected.\n- Request `/api/fs/stream` or `/api/fs/thumb` without a session token and see whether file content is returned.","fix":"- Patch available via the linked GitHub fix; the fixed version is unknown from the sources.","status":"open","published_at":"2026-11-03T16:17:27+00:00","first_seen_at":"2026-11-03T16:21:44+00:00","triaged_at":"2026-11-03T16:23:42+00:00","updated_at":"2026-11-03T16:23:42+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-03T16:23:42Z","model":"claude-haiku-5-5","output":{"fix":"- Patch available via the linked GitHub fix; the fixed version is unknown from the sources.","reach":"network","title":"Foxel: missing authentication lets anonymous users read any stored file","impact":"high","summary":"Foxel through version 2.4.0 exposes its /api/fs/stream and /api/fs/thumb endpoints without requiring login. An unauthenticated attacker can supply a mount prefix and path to download full file contents or thumbnails from any mount, bypassing PathRule permissions.","audience":"businesses","category":"other","nicknames":[],"who_cares":["foxel","self-hosted","file-storage"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Anonymous attackers read any file across all mounts","analyst_note":"Find the fixed Foxel version and confirm the affected endpoints on the linked GitHub patch and the VulnCheck advisory.","how_to_check":"- Confirm the Foxel version in use; versions through `2.4.0` are listed as affected.\n- Request `/api/fs/stream` or `/api/fs/thumb` without a session token and see whether file content is returned.\n- unknown for any other check the sources do not describe.","plain_action":"","needs_analyst":true,"not_affected_if":["not-exposed-to-network"],"who_is_affected":"Teams running a self-hosted Foxel instance that exposes the file API to a network reachable by others. The sources describe the flaw as affecting all mounts and bypassing PathRule grants, so any file reachable through Foxel's virtual file system is at risk. Instances not reachable from untrusted networks are less exposed, but the sources do not say more.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000725,"input_tokens":4183,"output_tokens":614,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-121555':13A,16A '-2026':12A,15A '/api/fs/stream':31B,79C '/api/fs/thumb':33B,81C '2.4.0':28B,63C 'across':100C 'allow':70C 'anonym':5A 'attack':40B,72C,83C 'authent':3A,67C 'bypass':58B,103C 'contain':64C 'content':52B,97C 'cve':11A,14A 'download':49B 'endpoint':34B,82C 'expos':29B 'file':10A,18B,51B,75C,96C 'file-storag':17B 'foxel':1A,20B,25B,61C 'full':50B,95C 'grant':106C 'host':24B 'let':4A 'login':37B 'miss':2A,66C 'mount':44B,57B,88C,102C 'path':47B,92C 'pathrul':59B,104C 'permiss':60B,105C 'prefix':45B,89C 'read':7A,74C 'relat':91C 'request':77C 'requir':36B 'retriev':94C 'self':23B 'self-host':22B 'storag':19B 'store':9A 'suppli':42B,85C 'thumbnail':54B,99C 'unauthent':39B,71C 'user':6A 'version':27B 'vfs':87C 'vulner':68C 'without':35B","nicknames":[],"mitigations":[],"who_affected":"Teams running a self-hosted Foxel instance that exposes the file API to a network reachable by others. The sources describe the flaw as affecting all mounts and bypassing PathRule grants, so any file reachable through Foxel's virtual file system is at risk. Instances not reachable from untrusted networks are less exposed, but the sources do not say more.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["filestorage","foxel","high","other","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-03T16:17:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121555","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121555","severity":null,"published_at":"2026-11-03T16:17:27+00:00","modified_at":"2026-11-03T16:17:27+00:00","first_seen_at":"2026-11-03T16:21:44+00:00","fetched_at":"2026-11-03T16:21:44+00:00","note":null}],"documents":[{"id":58845,"url":"https://github.com/DrizzleTime/Foxel/commit/73d9fa825e1004d37abb7b10faea0cd7f5bcb463","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":58846,"url":"https://www.vulncheck.com/advisories/foxel-through-2.4.0-unauthenticated-file-read-via-api-fs-stream-and-api-fs-thumb","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}