CVE-2022-50890

8.7 highEPSS 1.1%

High (8.7) in skyjos owlfiles. EPSS 1.1% chance of exploitation in the next 30 days.

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

skyjos:owlfiles

References

https://apps.apple.com/us/app/owlfiles-file-manager/id510282524
https://www.exploit-db.com/exploits/51036
https://www.skyjos.com/
https://www.vulncheck.com/advisories/owlfiles-file-manager-path-traversal
https://www.exploit-db.com/exploits/51036

Check your stack JSON