CVE-2026-104106 Details

A vulnerability in FileRise, a self-hosted web-based file manager, prior to version 3.23.0, allows an attacker to manipulate two-factor authentication (2FA) settings without proper verification. The issue arises because disabling TOTP or enrolling a new TOTP secret only requires an authenticated session and a valid CSRF token, bypassing the need for a password or current TOTP code. This flaw enables an attacker with access to an authenticated session to silently disable 2FA or enroll a new secret, effectively hijacking the second factor. The vulnerability is rooted in the absence of step-up re-authentication for critical security changes, leaving accounts exposed to unauthorized 2FA modifications.

Users should upgrade to FileRise version 3.23.0, which addresses this vulnerability by requiring step-up re-authentication for TOTP changes and implementing a two-phase enrollment process that verifies a new secret before activating it.