copyparty vulnerabilities and fixes

Recent CVEs affecting copyparty, with upgrade or downgrade steps. 8 tracked.

copyparty has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-03-10. Highest priority: CVE-2025-54589 (score 48/100).

• CVE-2026-30974 MEDIUM 4.6 UPGRADE Copyparty is a portable file server
• CVE-2026-27948 MEDIUM 5.4 UPGRADE Copyparty is a portable file server
• CVE-2025-58753 HIGH 7.5 UPGRADE Copyparty is a portable file server
• CVE-2025-54796 HIGH 7.5 UPGRADE Copyparty is a portable file server
• CVE-2025-54589 MEDIUM 6.3 UPGRADE Copyparty is a portable file server
• CVE-2025-54423 MEDIUM 5.4 UPGRADE copyparty is a portable file server
• CVE-2025-27145 LOW 3.6 UPGRADE copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.1
• CVE-2023-41471 HIGH 7.8 DOWNGRADE Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code

FAQ

How do I fix copyparty vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is copyparty being exploited right now?

None of the tracked copyparty CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which copyparty CVE should I patch first?

CVE-2025-54589 currently ranks highest (48/100): Copyparty is a portable file server.

RSS feed for copyparty · ← Back to latest CVEs