A critical privilege management flaw in File Browser allows unauthenticated attackers to achieve remote command execution when specific settings are enabled.

The vulnerability resides in the signupHandler component, which fails to properly strip Execute permissions and Commands lists from new user accounts. This allows an unauthenticated user to inherit elevated shell execution privileges if an administrator has enabled public signup and server-side execution features.

Successful exploitation allows an attacker to execute arbitrary commands on the underlying server with the privileges of the File Browser application. This can lead to a total compromise of the host system, unauthorized access to sensitive data, and potential lateral movement within the network. Given the CVSS score of 8.1, this represents a significant risk to organizational infrastructure and data integrity.

Immediate Action: Update the File Browser installation to version 2.62.2 or later immediately to apply the necessary privilege management fixes.

Proactive Monitoring: Review server access logs for anomalous registration activity or unusual shell commands executed by the service account.

Compensating Controls: Disable the public signup feature and restrict administrative access to the File Browser interface until the patch is successfully deployed.

Public Exploit Available: No (no confirmed weaponized exploit or public PoC identified).

This vulnerability presents a severe risk due to the potential for unauthenticated remote code execution. Administrators should prioritize updating to version 2.62.2 as the primary mitigation. Ensure that public-facing instances are audited for secure configuration settings while the patch deployment is underway to minimize the attack surface.