CVE-2022-50890

Owlfiles File Manager 12.0.1 - Path Traversal

CVSS 8.7 HIGHEPSS 0.9%CWE-22

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.7EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Skyjos · Owlfiles File Manager

References

https://apps.apple.com/us/app/owlfiles-file-manager/id510282524 https://www.exploit-db.com/exploits/51036 https://www.skyjos.com/https://www.vulncheck.com/advisories/owlfiles-file-manager-path-traversal