CVE-2025-15585
Medium
Description
Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.
SeverityMedium
CVSS6.7
Exploit probability—
ProductFileflows
PublishedFeb 19, 2026
First seenFeb 19, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- fileflows fileflows25.05.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fileflows fileflows | v < 25.05.2 | 25.05.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.