LLiquidFiles

Products

Exploited and recent CVEs

• CVE-2026-12673 Medium 5.9 Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in the 0.4%
• CVE-2025-46093 Critical 9.9 LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers 0.6%
• CVE-2025-46094 Low 3.8 LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript. 0.5%