CVE-2026-11416
MoviePilot Path Traversal via Cloud Storage Download Handlers
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating the configured download directory with a filename taken directly from remote cloud API metadata without basename normalization or path validation. An attacker who controls a filename returned by a remote cloud storage API can include traversal sequences ../ in the filename to cause downloaded content to be written outside the configured download directory, potentially overwriting arbitrary files including configuration or plugin files reachable by the application process.
| CWE | CWE-22 |
| Vendor | jxxghp |
| Product | moviepilot |
| Published | Jun 5, 2026 |
| Last Updated | Jun 8, 2026 |
Get instant alerts for jxxghp moviepilot
Be the first to know when new high vulnerabilities affecting jxxghp moviepilot are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H