Vulnerability · Published Jan 13, 2026 · Assigned by VulnCheck
CVE-2022-50890Owlfiles File Manager 12.0.1 - Path Traversal
High 7.5
In plain English
A high-severity path traversal in Owlfiles File Manager from Skyjos. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 34.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Skyjos | Owlfiles File Manager | 12.0.1 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-51036 exploit
- Vendor Homepage product
- Official App Store Listing product
- VulnCheck Advisory: Owlfiles File Manager 12.0.1 - Path Traversal third-party-advisory