p PatchFirst

PatchFirst · Latest vulnerabilities

frigate vulnerabilities

Vulnerabilities published for frigate in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2026-33125

    High · CVSS 7.1EPSS 0.25%Fix available

    Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts

    Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. This issue has been patched in version 0.16.3.

    • Update to 0.16.3
    Published Updated
  2. CVE-2024-32874

    Medium · CVSS 6.8EPSS 0.77%Fix available

    In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

    Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`.

    • Update to 0.13.2
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →