Skip to content
OpenAdvisories

Product · music-assistant

server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-26975

    Music Assistant Server Path Traversal in Playlist Update API Allows Remote Code Execution

    Music Assistant is an open-source media library manager that integrates streaming services with connected speakers. Versions 2.6.3 and below allow unauthenticated network-adjacent attackers to execute arbitrary code on affected installations. The music/playli…

    music-assistant server