CVE-2026-57492: CWE-306: Missing Authentication for Critical Function in error311 FileRise
Description
FileRise versions prior to 3.16.0 have a vulnerability where the application treats an empty or missing users.txt file as a fresh installation, allowing an unauthenticated remote attacker to create a new initial administrator account. This occurs because the application lacks a durable setup-complete marker independent of the user store. The issue is fixed in version 3.16.0.
CVSS v3.1
Score 7.4high
Affected software
error311
FileRise
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FileRise is a self-hosted web-based file manager. Before version 3.16.0, if the users.txt file is empty or missing—due to storage loss, truncation, or other failures—the application reverts to setup mode. This allows an unauthenticated remote attacker to detect the reopened setup mode and create a new initial administrator account through the setup flow. The root cause is the absence of a durable setup-complete marker independent from the mutable user store. The vulnerability is identified as CWE-306 (Missing Authentication for Critical Function) and has a CVSS 3.1 score of 7.4.
Potential Impact
An unauthenticated remote attacker can gain administrative access by exploiting the application's failure to recognize a completed setup state when the user store is empty or missing. This leads to a full compromise of the application without requiring prior authentication.
Mitigation Recommendations
Upgrade FileRise to version 3.16.0 or later, where this issue is fixed by implementing a durable setup-complete marker independent of the user store. No other mitigation is indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-24T14:53:40.111Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acfeac92cdf04f656afb449
Added to database: 10/14/2026, 20:49:13 UTC
Last enriched: 10/14/2026, 21:03:19 UTC
Last updated: 10/14/2026, 21:08:19 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.