M-Files Server
0 remedies
cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*
0 remedies
- < 25.12
M-Files Server Improper Access Validation Vulnerability Allowing Unauthorized File Downloads
Vulnerability
A vulnerability exists in M-Files Server versions prior to 25.12, where improper access checks allow users to download files via M-Files Web Companion. This occurs despite the presence of the Print and Download Prevention module, which is intended to block such actions.
Impact
Exploitation of this vulnerability bypasses the Print and Download Prevention module, allowing unauthorized file downloads through M-Files Web Companion.
Added: Dec 18, 2025, 9:47 AM
Updated: Dec 18, 2025, 5:00 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
2.5exploitability
4.9remediation
0.0relevance
1.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.