File-transfer type confusion permits unauthorized repository writes in Psono Server

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-117469 · Microsoft / collected KEV context

cve-program · CVE-2026-117469

• https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-117469.md
• https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.2.3/psono/restapi/serializers/file_repository_upload.py
• https://gitlab.com/esaqa/psono/psono-server/-/commit/64753b19bd8d03cfbed20db575f4dccb220d9ca4
• https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.2.4
• https://gitlab.com/esaqa/psono/psono-server

• File-transfer type confusion permits unauthorized repository writes in Psono Server · Newly collected advisory · 27 Oct 2026