motioneye-project/motioneye Security Advisories | GitStock

critical2026-06-23

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

GHSA-phv5-334h-mxcw

critical2026-06-23

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

GHSA-qxvg-h7q2-hcxh

medium2026-06-23

motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

GHSA-j67x-q29f-qcvv · CVE-2026-55863

high2026-06-23

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

GHSA-rw9q-97r9-8gvh · CVE-2026-55488

critical2026-06-22

motionEye: Authentication possible via password hash

GHSA-r3cw-c95m-wfh9 · CVE-2026-46488

medium2026-06-22

motionEye's World-Readable Configuration File Exposes Admin Password Hash

GHSA-rhgp-6wq6-9j67 · CVE-2026-32315

medium2026-06-22

motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

GHSA-g9fx-5r4h-pcw3 · CVE-2026-31978

high2025-11-03

motionEye vulnerable to RCE via unsanitized motion config parameter

GHSA-j945-qm58-4gjx · CVE-2025-60787

high2025-05-15

motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

GHSA-g5mq-prx7-c588 · CVE-2025-47782

high2022-03-25

MotionEye allows attackers to access sensitive information

GHSA-2c7w-v459-cwgf · CVE-2022-25568