From 3b3df83d648c0156ee09d33f695acefda58af404 Mon Sep 17 00:00:00 2001 From: Henrique Dias Date: Mon, 30 Jun 2025 16:26:05 +0200 Subject: [PATCH] docs: add warning to command runner --- www/docs/configuration.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/www/docs/configuration.md b/www/docs/configuration.md index bc4f0ac8..2b7299e3 100644 --- a/www/docs/configuration.md +++ b/www/docs/configuration.md @@ -97,6 +97,10 @@ filebrowser config set --auth.method=noauth ## Command Runner +> [!CAUTION] +> +> The **command execution** functionality has been disabled for all existent and new installations by default from version v2.33.8 and onwards, due to continuous and known security vulnerabilities. You should only use this feature if you are aware of all of the security risks involved. For more up to date information, consult issue [#5199](https://github.com/filebrowser/filebrowser/issues/5199). + The command runner is a feature that enables you to execute any shell command you want before or after a certain event. Right now, these are the events: * Copy