Jellyfin vulnerabilities
We track 14 vulnerabilities in Jellyfin products across 2 products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest Jellyfin vulnerabilities
- 7.4 High severity
jellyfin: Improper Limitation of a Pathname to a Restricted Directory
Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualFolders/Name endpoints that allows attackers to delete or move directories via unvalidated library names. Unauthenticated attackers can
- 7.1 High severity
jellyfin: Server-Side Request Forgery
Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecurityValidator by embedding gzip-compressed SVG in non-SVG image data URIs. Attackers can upload such profile images via POST /UserImage, then
- 8.8 High severity
jellyfin: Improper Limitation of a Pathname to a Restricted Directory
Jellyfin is an open source self hosted media server. From 10.9.0 until 10.11.10, the POST /ClientLog/Document endpoint accepts the Authorization header's Client and Version fields and uses them unsanitized as components of the on-disk filename when persisting
- 8.8 High severity
jellyfin: Improper Neutralization of Argument Delimiters in a Command
Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument injection vulnerability exists in the subtitle conversion code path. SubtitleEncoder.ConvertTextSubtitleToSrtInternal (SubtitleEncoder.cs, line 382) interpolate
- 9.1 Critical severity
jellyfin: Improper Neutralization of Argument Delimiters in a Command
Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability via ffmpeg argument injection through the StreamOptions query parameter parsing mechanism. The ParseStreamOptions method
- 8.1 High severity
jellyfin: External Control of File Name or Path
Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the LiveTV M3U tuner endpoint (POST /LiveTv/TunerHosts), where the tuner URL is not validated, allowing local file read via non-HTTP paths and Serve
- 8.8 High severity
Jellyfin is an open source self hosted media server.
Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the subtitle upload endpoint (POST /Videos/{itemId}/Subtitles), where the Format field is not validated, allowing path traversal via the file extens
- 9.8 Critical severity
code-quality.yml: Improper Privilege Management
Jellyfin is an open-source media system. The code-quality.yml GitHub Actions workflow in jellyfin/jellyfin-ios is vulnerable to arbitrary code execution via pull requests from forked repositories. Due to the workflow's elevated permissions (nearly all write pe
- 8.8 High severity
jellyfin: Improper Neutralization of Argument Delimiters in a Command
Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability
- 7.5 High severity
jellyfin: Authentication Bypass by Spoofing
Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes re
- 7.2 High severity
jellyfin: Improper Neutralization of Special Elements used in a Command
Jellyfin is a system for managing and streaming media. Prior to version 10.8.13, the `/System/MediaEncoder/Path` endpoint executes an arbitrary file using `ProcessStartInfo` via the `ValidateVersion` function. A malicious administrator can setup a network shar
- 8.8 High severity
jellyfin: Improper Neutralization of Argument Delimiters in a Command
Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the `/Videos/<itemId>/stream` and `/Videos/<itemId>/stream.<container>` endpoints which are pre
- 8.1 High severity
jellyfin: Improper Limitation of a Pathname to a Restricted Directory
Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vuln
- 7.5 High severity
Jellyfin: Server-Side Request Forgery
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.