---
id: 3748
title: "LiquidFiles Vulnerabilities: From Discovery to Disclosure"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/"
published_at: "2025-02-12 21:00"
tags: ["vulnerability-research", "ruby", "semgrep", "disclosure", "liquidfiles"]
phying_url: "https://phying.com/item/3748"
lang: en
---

# LiquidFiles Vulnerabilities: From Discovery to Disclosure

## Summary

Hunting vulnerabilities in LiquidFiles v4.1.1 with Semgrep: 623 findings, a command injection blocked by shellescape, and the path that still led to impactful bugs before disclosure.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-02-12 21:00
- **Original:** https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/
- **Phying News:** https://phying.com/item/3748