High 7.5Published Jan 13, 2026

CVE-2022-50890Owlfiles File Manager 12.0.1 - Path Traversal

Updated under an hour ago (Oct 26, 2026, 8:20 AM ET)

Does this affect you?

It affects Skyjos Owlfiles File Manager and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Skyjos Owlfiles File Manager

Exploited in the last 30 days

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Analyzed
Record last updated: Apr 7, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Skyjos Owlfiles File Manager skyjos:owlfiles_file_manager (from the name)	12.0.1	CNA record
skyjos owlfiles skyjos:owlfiles	12.0.1	NVD

References

https://www.exploit-db.com/exploits/51036exploit
https://www.skyjos.com/product
https://apps.apple.com/us/app/owlfiles-file-manager/id510282524product
https://www.vulncheck.com/advisories/owlfiles-file-manager-path-traversalthird-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.