Back to Database
Status published
Medium
CVE-2024-11176
Incorrect evaluation of effective permissions in M-Files Aino
Vulnerability Description
Improper access control vulnerability in M-Files Aino in versions before 24.10 allowed an authenticated user to access object information via incorrect evaluation of effective permissions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11176
Credits & Attribution
No credits recorded in the NVD database.
References
More from M-Files Corporation
View All →CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8...
High
7
CVE-2025-5964
Path traversal in M-Files API
High
8.4
CVE-2025-3087
Stored XSS Vulnerability in M-Files Web
Medium
5.1
CVE-2025-3086
User in anonymous role could create and delete views
Medium
6.3
CVE-2025-2159
Stored XSS in M-Files Admin user interface
Medium
5.1
Affected Vendor
M-Files Corporation
View all reports →Affected Software
M-Files Aino
Vulnerable Versions:
0
Timeline
Official Publish:
November 20th, 2024
Last Modified:
February 23rd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1078
Valid Accounts
Persistence
T1548
Abuse Elevation Control Mechanism
Privilege Escalation
T1021
Remote Services
Lateral Movement
T1098
Account Manipulation
Defense Evasion
T1222
File and Directory Permissions Modification
Defense Evasion
T1574
Hijack Execution Flow
Privilege Escalation
T1005
Data from Local System
Collection
T1562
Impair Defenses
Defense Evasion