Vulnerabilities

TI-2025-37818 CVE-2025-60787 · GHSA-j945-qm58-4gjx

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration…

HIGH 67

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.18462 Published 2025-10-03 Fixed in 0.43.1b5 CWE-116

TI-2022-09169 CVE-2022-25568 · GHSA-2c7w-v459-cwgf

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET…

MEDIUM 43

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0686 Published 2022-03-24 Fixed in 0.43.1b1 CWE-1188

TI-2021-19932 CVE-2021-44255 · GHSA-m2c7-42rf-c62f

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606…

LOW 37

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrar…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03138 Published 2022-01-31 No fix listed CWE-306

Vulnerabilities

Filters

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration…

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET…

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606…