LiquidFiles vulnerabilities
We track 2 vulnerabilities in LiquidFiles products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2025.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest LiquidFiles vulnerabilities
- 7.3 High severity
Liquidfiles: Authentication Bypass by Primary Weakness
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existenc
- 8.8 High severity
LiquidFiles: Incorrect Permission Assignment for Critical Resource
LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.