CVE-2022-50890

Owlfiles File Manager 12.0.1 - Path Traversal

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.

Affected

Skyjos · Owlfiles File Manager

CVSS v4.0 VULNCHECK

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULNCHECK

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

1.11% chance of exploitation in the next 30 days, 65th percentile

Published

2026-01-13

Updated

2026-04-07

Proof-of-concept exploits (2)

• https://www.exploit-db.com/exploits/51036
• TereshkinVS/TereshkinVS_DZ100★ · 2026-02-12

Security advisories

• https://www.vulncheck.com/advisories/owlfiles-file-manager-path-traversal
• https://apps.apple.com/us/app/owlfiles-file-manager/id510282524
• https://www.skyjos.com

References

• CVE Record
• NVD entry