1. Home
  2. CVE Database
  3. CVE-2026-43752
MEDIUM · 4.9

CVE-2026-43752

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vul...

Vulnerability Description

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ClarisFilemaker Server< 26.0.1

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2026-43752?

CVE-2026-43752 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vul...

How severe is CVE-2026-43752?

CVE-2026-43752 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-43752?

Check the references section above for vendor advisories and patch information. Affected products include: Claris Filemaker Server.