A vulnerability categorized as critical has been discovered in flatnotes 5.5.4. This impacts an unknown function of the component Attachment Handling. Such manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2026-50873. The attack may be launched remotely. There is no exploit available.