PT-2026-26650 · Unknown · File Thingie

Leefish + 1 · CVE-2026-30580 · Published 2026-03-20 · Updated 2026-03-22

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions File Thingie version 2.5.7

Description File Thingie version 2.5.7 is susceptible to a Directory Traversal issue. A malicious user can exploit the application's "create folder from url" functionality to read arbitrary files on the target system. The vulnerability involves manipulating the input to access files outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-30580

Affected Products

File Thingie

References · 4

• 🔥 https://github.com/SpeWnz/Vulnerability-Research/tree/main/CVE-2026-30580 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30580 · Security Note
• https://github.com/leefish/filethingie · Note
• https://twitter.com/CVEnew/status/2035627035565982084 · Twitter Post