---
id: CVE-2026-92616
title: >-
  FileRise before version 3.28.0 contains a privilege escalation vulnerability
  that allows authenticated low-privilege attackers to gain unauthorized read
  and write access by exploiting improper session isolation between the WebDAV
  interfa…
summary: >-
  FileRise before version 3.28.0 contains a privilege escalation vulnerability
  that allows authenticated low-privilege attackers to gain unauthorized read
  and write access by exploiting improper session isolation between the WebDAV
  interfa…
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-613
vendor: error311
product: FileRise
affected:
  - FileRise < 3.28.0
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T16:17:23.647'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92616'
references:
  - url: 'https://github.com/error311/FileRise/releases/tag/v3.28.0'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/filerise-privilege-escalation-via-webdav-session-inheritance
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-16T15:41:37.225291Z'
ingestedAt: '2026-09-16T14:57:28.048Z'
epss: 0.00394
epssPercentile: 0.30911
---

## Overview

FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attackers to gain unauthorized read and write access by exploiting improper session isolation between the WebDAV interface and the web application session context. Attackers can combine valid Basic-Auth credentials with an active admin PHPSESSID cookie to bypass authorization boundaries, as the WebDAV layer incorrectly inherits elevated privileges from an ambient web session rather than enforcing independent stateless authentication per RFC 4918.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.