Security
فارسی
All products

motioneye

PyPI · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
motionEye vulnerable to RCE in add_camera Function Due to unsafe command executionCVE-2025-47782 · GHSA-G5MQ-PRX7-C588Version ranges need review. motioneye PyPI High Fix reported
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview EndpointCVE-2026-31978 · GHSA-G9FX-5R4H-PCW3Version ranges need review. motioneye PyPI Medium Fix reported
motionEye's missing authentication on ActionHandler allows unauthenticated camera action executionCVE-2026-55863 · GHSA-J67X-Q29F-QCVVVersion ranges need review. motioneye PyPI Medium Fix reported
motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File ReadCVE-2026-55488 · GHSA-RW9Q-97R9-8GVHVersion ranges need review. motioneye PyPI High Fix reported
motionEye's World-Readable Configuration File Exposes Admin Password HashCVE-2026-32315 · GHSA-RHGP-6WQ6-9J67Version ranges need review. motioneye PyPI Medium Fix reported
motionEye vulnerable to RCE via unsanitized motion config parameterCVE-2025-60787 · GHSA-J945-QM58-4GJXVersion ranges need review. motioneye PyPI High Fix reported
Unrestricted Upload of File with Dangerous Type in motionEyeCVE-2021-44255 · GHSA-M2C7-42RF-C62FVersion ranges need review. motioneye PyPI High No fix reported
motionEye: Authentication possible via password hashCVE-2026-46488 · GHSA-R3CW-C95M-WFH9Version ranges need review. motioneye PyPI Critical Fix reported
motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path TraversalGHSA-PHV5-334H-MXCW motioneye PyPI Critical Fix reported
motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)GHSA-QXVG-H7Q2-HCXH motioneye PyPI Critical Fix reported
MotionEye allows attackers to access sensitive informationCVE-2022-25568 · GHSA-2C7W-V459-CWGFVersion ranges need review. motioneye PyPI High Fix reported