diff --git a/CHANGES b/CHANGES
index 951d6142f..bdde4480f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2123,4 +2123,5 @@
 * Better backup config filename when downloading
 * branding: footer can have template variables like %YEAR% and %VERSION%
 * sftp: secure the API with a token
+* filemanager: Add extract context menu item
 
diff --git a/src/infra_version.js b/src/infra_version.js
index 657596d34..1b31c4abf 100644
--- a/src/infra_version.js
+++ b/src/infra_version.js
@@ -22,6 +22,6 @@ exports = module.exports = {
         'redis': { repo: 'cloudron/redis', tag: 'cloudron/redis:2.3.0@sha256:0e31ec817e235b1814c04af97b1e7cf0053384aca2569570ce92bef0d95e94d2' },
         'mail': { repo: 'cloudron/mail', tag: 'cloudron/mail:2.10.0@sha256:3aff92bfc85d6ca3cc6fc381c8a89625d2af95cc55ed2db692ef4e483e600372' },
         'graphite': { repo: 'cloudron/graphite', tag: 'cloudron/graphite:2.3.0@sha256:b7bc1ca4f4d0603a01369a689129aa273a938ce195fe43d00d42f4f2d5212f50' },
-        'sftp': { repo: 'cloudron/sftp', tag: 'cloudron/sftp:3.0.0@sha256:a89c2dbb4137d088ee9d8274a76b1059a506d4d841770c0d576cb53111fdc44c' }
+        'sftp': { repo: 'cloudron/sftp', tag: 'cloudron/sftp:3.0.0@sha256:81ede2fd190ad76510a41aec10f405216718741b78ab21d0ec7890879c233297' }
     }
 };
diff --git a/src/routes/filemanager.js b/src/routes/filemanager.js
index 0bd8aae00..a6d757fef 100644
--- a/src/routes/filemanager.js
+++ b/src/routes/filemanager.js
@@ -24,7 +24,7 @@ function proxy(req, res, next) {
         let parsedUrl = url.parse(req.url, true /* parseQueryString */);
         parsedUrl.query['access_token'] = result.token;
 
-        req.url = url.format({ pathname: `/files/${appId}/${req.params[0]}`, query: parsedUrl.query });
+        req.url = url.format({ pathname: `/files/${appId}${req.params[0]}`, query: parsedUrl.query }); // params[0] already contains leading '/'
 
         const proxyOptions = url.parse(`https://${result.ip}:3000`);
         proxyOptions.rejectUnauthorized = false;