Skip to content
OpenAdvisories

Vendor

jxxghp

5 known vulnerabilities.

Products

MoviePilot 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-77931

    MoviePilot 3.1.5 Command Injection via ExecuteCommandTool

    MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata p…

    jxxghp MoviePilot
  • High 8.1
    CVE-2026-11416

    MoviePilot Path Traversal via Cloud Storage Download Handlers

    MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating the configured download directory with a filename taken directly from remote cl…

    jxxghp MoviePilot
  • High 7.7
    CVE-2026-10107

    MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint

    MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that allows authenticated attackers to request arbitrary URLs by supplying a resource_token cookie and a URL whose domain matches the assembled allowlist. Attackers…

    jxxghp MoviePilot