What is GHSA-xf6h-j6rm-x673?

GHSA-xf6h-j6rm-x673 is a security advisory published by GitHub Security Advisories with Medium severity. An authenticated administrator may be able to achieve arbitrary code execution on the host system...

Which CVE IDs does GHSA-xf6h-j6rm-x673 cover?

GHSA-xf6h-j6rm-x673 covers the following CVE IDs: CVE-2026-43752. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xf6h-j6rm-x673?

GHSA-xf6h-j6rm-x673 has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

GHSA-xf6h-j6rm-x673MediumCVSS 4.9

An authenticated administrator may be able to achieve arbitrary code execution on the host system...

Vendor

GitHub Security Advisories

Published

July 9, 2026

Last Modified

July 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-43752 →

📋 Description

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-43752
https://community.claris.com/en/s/article/Arbitrary-Code-Execution-Vulnerability-Addressed-in-FileMaker-Server-via-Miniforge-Installer-Upload
https://github.com/advisories/GHSA-xf6h-j6rm-x673