TI-2026-20743 CVE-2026-25643
Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape
Priority HIGH 74
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
blakeblackshear
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
blakeblackshear records in CISA KEVNo blakeblackshear vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
Priority HIGH 70
Frigate is an open source network video recorder.
TI-2026-52911 CVE-2026-75607
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
Priority HIGH 68
Frigate is an open source network video recorder.
TI-2026-25557 CVE-2026-33125 · GHSA-vg28-83rp-8xx4
Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts
Priority HIGH 68
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
TI-2026-52912 CVE-2026-75608
Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
Priority HIGH 67
Frigate is an open source network video recorder.
TI-2025-38649 CVE-2025-62382
Frigate Vulnerable to Arbitrary File Read via Export Thumbnail "image_path" parameter
Priority HIGH 67
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
Priority MEDIUM 62
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
TI-2026-25865 CVE-2026-33469
Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw
Priority MEDIUM 62
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
Priority MEDIUM 56
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
Priority MEDIUM 45
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
TI-2023-24471 CVE-2023-45672
Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`
Priority LOW 36
Frigate is an open source network video recorder.
TI-2023-24469 CVE-2023-45670
Frigate cross-site request forgery in `config_save` and `config_set` request handlers
Priority LOW 33
Frigate is an open source network video recorder.
TI-2024-21746 CVE-2024-32874 · GHSA-w4h6-9wrp-v5jq
In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Priority LOW 31
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.
Priority LOW 24
Frigate is an open source network video recorder.