Search: CVE-2026-33645

CVE-2026-33645 is a path traversal vulnerability in ShaneIsrael fireshare version 1.5.1. It allows an authenticated attacker to write arbitrary files outside the intended upload directory via the chunked upload endpoint by exploiting improper sanitization of the 'checkSum' multipart field. This can lead to integrity violations and potentially enable further attacks depending on the deployment environment. The issue is fixed in version 1.5.2.