Cloudreve
A self-hosted web drive in Go that stores files locally or on S3, OneDrive and other clouds, with share links, WebDAV and online previews.
Cloudreve at a glance
What is Cloudreve?
Cloudreve gives users a browser-based drive on top of storage you pick: the local disk, remote nodes, OneDrive, S3-compatible services and several Chinese cloud providers such as Aliyun OSS, Tencent COS and Qiniu Kodo. Uploads and downloads can go straight between the client and the storage backend. It adds drag-and-drop resumable uploads, archive handling, background downloads through Aria2 or qBittorrent, expiring share links, metadata and tag search, and in-browser viewing or editing of video, images, ePub, Markdown and Office files. Users are organized into groups, and every backend is also reachable over WebDAV. The backend is written in Go, the frontend in React.
Good fit if
- You want one web interface over files that live in object storage or on OneDrive rather than on the server's own disk.
- You share files with others through links that expire and want them to preview media without downloading.
- You like a single packaged binary for Linux, macOS or Windows with every feature included.
Before you adopt it
Cloudreve uses the GPL-3.0 license, and the repository has no paid parts. Cloudreve asks contributors to sign a contributor license agreement. One developer authored nearly nine in ten recent commits, and only eight commits landed in the last 90 days, so progress rests mostly on that person. Ready-made builds cover Linux, macOS and Windows, a Docker image is available, and the provided compose file adds PostgreSQL and Redis.
Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction
How to run Cloudreve yourself
One-click install
Not listed in Umbrel, CasaOS and Runtipi. Checked against each panel’s app catalog on 12 November 2026.
Ways to install
- Docker files
- Dockerfile or compose file in the repository
- Docker image
- cloudreve/cloudreve: 1.8M pulls · x86-64, ARM64 · 573 MB download
- Compose file
- docker-compose.yml: 3 services (postgres, redis)
- Setup effort
- 2 of 5, judged from the compose file
- Kubernetes
- No Helm chart in the repository
- Packages
- AUR and OpenWrt versions on Repology
- Desktop and mobile
- Builds for Linux, macOS, Windows, including ARM in GitHub releases
- Interface languages
- English only
Install instructions: cloudreve.org or the README on GitHub. Docker images and packages are checked weekly.
Cloudreve health: is it still maintained?
54 of 100, actively developed
Read from GitHub on 12 November 2026. How the score works
Cloudreve security
Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.
Latest advisories
- Storage-quota TOCTOU race in Cloudreve v4 allows quota bypass and storage-based denial of service
- SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
- Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
What each Scorecard check found
- Binary files10 / 10No compiled binaries checked into the repository
- Dangerous workflows10 / 10No risky patterns in GitHub Actions
- Dependency updates10 / 10A tool such as Dependabot keeps dependencies up to date
- Known vulnerabilities10 / 10No open known vulnerabilities in the code or its dependencies
- License file10 / 10A license file is present
- Maintained10 / 10Steady commits and issue activity in the last 90 days
- Packaging10 / 10Releases are published as packages from CI
- Pinned dependencies5 / 10Some dependencies use fixed versions
- Code review2 / 10Some changes are merged without review
- Best-practices badge0 / 10No OpenSSF Best Practices badge
- Branch protection0 / 10The main branch has no protection rules
- Fuzzing0 / 10No fuzz testing found
- Security policy0 / 10No security policy
- Signed releases0 / 10Releases are not signed
- Token permissions0 / 10CI tokens have broad write rights
Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 15 August 2022; checks that do not apply to Cloudreve are left out.
Cloudreve license: is it open source?
Cloudreve uses GPL-3.0, an open-source license approved by the OSI. Contributors sign a contributor license agreement, which lets the owner relicense their work later.
- February 2018First published on GitHub.
- TodayGPL-3.0. A contributor license agreement is required.
Cloudreve for developers
Written in
- Go 100%
- Go Template <1%
- Dockerfile <1%
- Shell <1%
Getting involved
Language shares are GitHub’s count of the code in the repository.
Alternatives to Cloudreve
- SeafileBeyond file syncing and sharing, a new way to organize your files with extensible file properties and… 38 health · GPL-2.0 · 15.5k stars
- FileGatorPowerful Multi-User File Manager 67 health · MIT · 3.1k stars
- NextcloudNextcloud server, a safe home for all your data 90 health · AGPL-3.0 · 37.5k stars
- PuterThe Internet Computer! Free, Open-Source, and Self-Hostable. 85 health · AGPL-3.0 · 44.2k stars
- copypartyPortable file server with accelerated resumable uploads, dedup, WebDAV, SFTP, FTP, TFTP, zeroconf, media… 75 health · MIT · 47.3k stars
Questions about Cloudreve
Is Cloudreve open source?
Yes. Cloudreve is published under GPL-3.0, an OSI-approved open-source license.
Is Cloudreve still maintained?
Its health score is 54 of 100 (actively developed). It had 8 commits in the last 90 days, the latest on 21 September 2026, and its latest release came out on 18 September 2026.
How do I run Cloudreve?
You can run it with the Docker image cloudreve/cloudreve, as an app for Linux, macOS, Windows, including ARM and in one click from YunoHost, TrueNAS, Unraid and 2 more. The README on GitHub has the exact steps.
What is Cloudreve written in?
Cloudreve is written mainly in Go (100% of the code), by GitHub’s count of the repository.
What are the alternatives to Cloudreve?
Close alternatives in the File storage & sync category include Seafile, FileGator, Nextcloud.