Sonarr vulnerabilities
We track 3 vulnerabilities in Sonarr products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
Latest Sonarr vulnerabilities
- 7.5 High severity
Sonarr: Improper Limitation of a Pathname to a Restricted Directory
Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files (containing API
- 9.8 Critical severity
Sonarr: Authentication Bypass by Spoofing
Sonarr is a PVR for Usenet and BitTorrent users. Versions prior to 4.0.16.2942 have an authentication bypass that affected users that had disabled authentication for local addresses (Authentication Required set to: `Disabled for Local Addresses`) without a rev
- 7.8 High severity
Sonarr: Incorrect Privilege Assignment
A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only