FileBrowser versions before 2.63.19 have a vulnerability related to case-insensitive filesystems. When self-registration is enabled with Signup and CreateUserDir, usernames differing only by letter case can map to the same physical home directory on case-insensitive filesystems like Windows/NTFS. This allows a second user to access, modify, or delete files of another user without prior authentication or victim interaction.