A vulnerability was found in perfree go-fastdfs-web up to 1.3.7. It has been classified as critical. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper authorization.
This vulnerability is listed as CVE-2026-6105. The attack may be initiated remotely. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
