What’s Vulnerable › Products

OpenListTeam OpenList vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your OpenListTeam OpenList version is affected

Latest OpenListTeam OpenList vulnerabilities

• CVE-2026-102663 — OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search (CVSS 4.3)
• CVE-2026-75602 — OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool (CVSS 6.5)
• CVE-2026-69160 — OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API (CVSS 6.5)
• CVE-2026-73509 — OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal (CVSS 7.6)
• CVE-2026-25060 — OpenList Insecure TLS Default Configuration (CVSS 8.1)
• CVE-2026-25059 — OpenList affected by Path Traversal in file copy and remove handlers (CVSS 8.8)
• CVE-2025-50183 — OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer (CVSS 6.5)