FileGator contains a vulnerability in its '/chmoditems' API endpoint where it accepts arbitrary Unix permission values without validation and passes them directly to PHP's native chmod() function. This flaw allows an authenticated user with 'chmod' permission to escalate their privileges to root. No patch information is currently available.