CyberSecBulletin

Seafile vulnerabilities

We track 2 vulnerabilities in Seafile products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Seafile vulnerabilities

  • 8.1 High severity

    SeaDoc: Absolute Path Traversal

    CVE-2026-129167Seafile

    Seafile SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 contains an absolute path traversal vulnerability that allows unauthenticated attackers holding a public share token to execute code. Attackers supply an absolute filename to /api/v1/confluenc

  • 8.7 High severity

    Seafile Server: Improper Neutralization of Input During Web Page Generation

    CVE-2026-30587Seafile

    Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc (sdoc) editor. The application fails to properly sanitize WebSocket messages regarding