Executive brief
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
Affected products
- Go github.com/gtsteffaniak/filebrowser
Junglewise Threat Intelligence
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
Severity: low · CVSS 3.1 · Published 2026-06-25
Technologies: github.com/gtsteffaniak/filebrowser (Go). Vendors: Go.
Related threats
- FileBrowser Quantum information disclosure to unauthenticated users
- GO-2026-5776 - FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
- GO-2026-5511 - FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
- gtsteffaniak FileBrowser missing rate limiting in login endpoint
- gtsteffaniak FileBrowser Quantum path traversal in public share delete