CVE-2024-9333 MEDIUM

CVE-2024-9333: Permission bypass in M-Files Connector for Copilot

Vendor M-Files Corporation
Product M-Files Connector for Copilot
Weakness CWE-281
Published October 2, 2024
Last update February 23, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation

Key dates

02Disclosure timeline

October 2, 2024 CVE published
February 23, 2026 Record updated