CVE-2025-26977

Summary

CVE-2025-26977 is a newly disclosed vulnerability affecting Ninja Team Filebird, an application used for managing files. This issue involves an Authorization Bypass through a User-Controlled Key, allowing unauthorized access to sensitive data. When access control security levels are incorrectly configured, attackers can exploit this vulnerability, gaining privileges they should not have. Affected versions of Filebird range from n/a to 6.4.2.1. It is crucial for users to update to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.