CyberRota Analysis
AI-GeneratedAn authenticated administrator can exploit a vulnerability in the Open Source LLM setup feature of the Admin Console to upload a malicious file, potentially leading to arbitrary code execution on the host system. Organizations using affected versions of FileMaker Server should prioritize remediation by upgrading to version 26.0.1 to mitigate this risk. This issue is particularly relevant for system administrators and security teams managing FileMaker Server deployments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)