Knowledge Base
Searching in : Trouble report
ID:TR06X11840
Added on: 2026-06-01
Last Update: 2026-06-16
Solved in version: 8.25.2
Platform: All Platforms
Product: NoMachine Web Player
Severity: Serious
Status:
Solved
Print this article
Possible arbitrary file download via web sessions in v8
A potential path traversal vulnerability may allow unauthenticated users to read and download arbitrary files via a crafted browser request.
This problem doesn't affect NoMachine v9.
SOLVED, Released in version 8.25.2