CVE-2025-53826 – Apache File Browser JWT Token Authentication Bypass

CVE ID : CVE-2025-53826

Published : July 15, 2025, 6:15 p.m. | 18 minutes ago

Description : File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of publication, no known patches exist.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…