Mopidy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Mopidy records in CISA KEV

No Mopidy vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76440 CVE-2026-111925 · GHSA-p8f3-3m4r-p796

Path traversal in Mopidy file backend exposes local files

HIGH 70

Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00431 Published 2026-10-19 Fixed in 4.0.5 CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0