Liquidfiles Liquidfiles vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Liquidfiles Liquidfiles: 1 record(s), with affected versions and fixes.
CVE-2026-12673
Medium · 5.9
CWE-285 Jun 20, 2026
Improper Authorization in Liquidfiles
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.