@srberlin phplist In release 3.5.5 changed the php session name. While the CKEditor plugin was updated to use that new session name I don’t think that the fckeditor was updated which would probably account for “access denied”.
The file browsing in the ckeditor plugin should work but you need to update the ckeditor plugin as explained at Cannot Browse Server After upgrading to 3.5.5