Unrated severityNVD Advisory· Published Jul 9, 2026· Updated Jul 9, 2026

CVE-2026-43752

Description

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

Affected products

Filemaker/Filemaker Serverllm-fuzzy
Range: = 26.0.1
Claris/Filemaker Serverllm-fuzzy
Range: = 26.0.1

Patches

Vulnerability mechanics

References

community.claris.com/en/s/article/Arbitrary-Code-Execution-Vulnerability-Addressed-in-FileMaker-Server-via-Miniforge-Installer-Uploadmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000