...
We are aware of the recently disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and can confirm Filestack is not impacted by these vulnerabilities.

Cloud Sources

Cloud sources are the online services that the Filestack File Picker can upload files from, in addition to the user’s device.

Supported Services

  • Google Drive, Google Photos and Gmail
  • Dropbox, Box, OneDrive and OneDrive for Business
  • Facebook, Instagram and GitHub
  • Google image search and Unsplash

Sign-In (OAuth)

By default, users sign in to each service through Filestack’s own OAuth clients, and the consent screen shows the Filestack name. You can add your own OAuth client credentials in the Developer Portal so the consent screen shows your name and logo. Gmail and OneDrive for Business require your own OAuth clients.

Custom CNAME

Applications that use a custom CNAME must use their own OAuth clients for cloud sources.

Cloud API

Cloud uploads run through the Filestack Cloud API and are available only in the File Picker.

Documentation

Read the Filestack documentation page for this term.

Open the documentation