CVE-2025-15585

Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.

• https://fileflows.com/docs/versions#version-2505
• https://projectblack.io/blog/fileflows-sql-injection-by-decompiling-net-code/#exploitation