CVE-2026-77633: Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

github.com/cloudreve/Cloudreve/v4

About this offer

high severity · CVSS 7.1 · CWE-362 · go github.com/cloudreve/Cloudreve/v4 · affected < 4.0.0-20260715025621-7329602751c0 · fixed in 4.0.0-20260715025621-7329602751c0

Offer details

Provider: github.com/cloudreve/Cloudreve/v4
Source: github-advisories
Score: 69.7
Confidence: 67%

Source evidence

What RADAR observed and classified to build this opportunity. It is what the source published, not a verification that the offer is still active.

GitHub Security AdvisoriesObserved: Sep 22, 2026Source reliability: 85%
CVE-2026-77633: Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service — github.com/cloudreve/Cloudreve/v4, fixed in 4.0.0-20260715025621-7329602751c0
Open source