CVE-2026-35585 | filebrowser File Browser up to 2.63.1 FILE/USERNAME os command injection (ID 5199)

A vulnerability, which was classified as critical, has been found in filebrowser File Browser up to 2.63.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument FILE/USERNAME results in os command injection.

This vulnerability is cataloged as CVE-2026-35585. It is possible to initiate the attack remotely. There is no exploit available.