CVE-2026-43752 File upload in FileMaker Server
An authenticated administrator can achieve arbitrary code execution on the host system by uploading a malicious file via the LLM setup feature.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-43752?
CVE-2026-43752 is a medium-severity vulnerability in Claris FileMaker Server, published on 9 Jul 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.
Weakness: CWE-434
Which versions are affected by CVE-2026-43752?
It affects 1 product.
Products include Claris Filemaker Server.
How do I fix CVE-2026-43752?
No fix has been published for CVE-2026-43752 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-43752 being exploited?
There is no known exploitation of CVE-2026-43752 in the wild and no public exploit code.
Other vulnerabilities in Claris FileMaker Server
Sources
Also known as GHSA-xf6h-j6rm-x673.