File Browser, a web-based file management interface, contains a vulnerability prior to version 2.63.1 where users auto-created through proxy authentication are incorrectly granted execution capabilities from global defaults. This occurs because a previous fix that stripped execute permissions from self-registered users was not applied to the proxy auth handler, allowing automatically provisioned accounts to inherit execution rights they should not have. The vulnerability is fixed in version 2.63.1.