Skip to content
OpenAdvisories

Vendor

OwnTone

3 known vulnerabilities.

Products

OwnTone Server 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-41458

    OwnTone Server < 29.1 Race Condition DoS via DAAP Login

    OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the D…

    OwnTone OwnTone Server