filegator vulnerabilities and fixes
Recent CVEs affecting filegator, with upgrade or downgrade steps. 1 tracked.
filegator has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-21. Highest priority: CVE-2026-63358 (score 36/100).
- CVE-2026-63358 HIGH 7.3 UPGRADE FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value dir
FAQ
How do I fix filegator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is filegator being exploited right now?
None of the tracked filegator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which filegator CVE should I patch first?
CVE-2026-63358 currently ranks highest (36/100): FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value dir.