GO-2026-6289Published
Cloudreve before 4.16.1 Path Traversal via Remote Download
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101051 · Microsoft / collected KEV context
cve-program · CVE-2026-101051
- https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w8j7-39hp-8x59
- https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-path-traversal-via-remote-download
euvd · EUVD-2026-87980
- https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w8j7-39hp-8x59
- https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-path-traversal-via-remote-download
nvd · CVE-2026-101051
- https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w8j7-39hp-8x59
- https://www.vulncheck.com/advisories/cloudreve-before-4.16.1-path-traversal-via-remote-download
osv · GHSA-w8j7-39hp-8x59
- https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w8j7-39hp-8x59
- https://github.com/cloudreve/cloudreve
osv · GO-2026-6289
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.