frigate
v0.18.2NVR with realtime local object detection for IP cameras
- Maintenance
- Active571 commits in 3 months · bus factor 2
- License
- MITPermissive · OSI-approved
- Security
- 30 advisories5 critical, 6 high, 18 medium, 1 low · Scorecard 6.3/10
- Supported versions
- No scheduleendoflife.date does not track this project
37.5k stars · 3.8k forks · 93 open issues · last release 1 month ago · data checked 39 minutes ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 5 critical, 6 high, 18 medium, 1 low. Check the patched version against the one you run.
- mediumGHSA-3cxh-fj2f-h497Oct 15, 2026Follow-up to GHSA-935r-r3xx-6gmw: the /auth media and stream checks classify the raw request path, not the one nginx serves
- Affected
- >= 0.18.0, <= 0.18.1
- Patched in
- >=0.18.2
- criticalGHSA-qjjw-3v66-279fOct 15, 2026source scheme bypasses go2rtc exec-filter in Frigate allowing admin-authenticated RCE as root
- Affected
- >= 0.18.0, <= 0.18.1
- Patched in
- >=0.18.2
- criticalGHSA-93xj-hg88-ffg7Oct 15, 2026direct websocket paths allows viewers to perform RCE as root
- Affected
- >= 0.18.0, <= 0.18.1
- Patched in
- >=0.18.2
- mediumGHSA-6hh9-gv48-g8q6Oct 13, 2026Persistent startup crash (DoS) via malformed webpush subscription keys — no key material validation before pywebpush construction
- Affected
- <0.18.0
- Patched in
- >=0.18.1
- mediumGHSA-935r-r3xx-6gmwOct 13, 2026Host-Header Fragment Truncation Bypasses Media and go2rtc Authorization in Frigate
- Affected
- <= 0.18.0
- Patched in
- >=0.18.1
- mediumGHSA-x2ch-x8hv-75xfOct 13, 2026[CWE-862] Camera name collision disables the admin-by-default guard, exposing face registry reads and face-training writes to viewer-role users (v0.17.0-beta1 through 0.18.0 and master)
- Affected
- >= v0.17.0-beta1, <= 0.18.0
- Patched in
- >=0.18.1
- mediumGHSA-xwhm-9623-6r35Oct 9, 2026RBAC bypass — cross-camera image disclosure via image_path in export endpoints
- Affected
- <0.18.0
- Patched in
- >=0.18.0
- mediumGHSA-w3c4-957q-2jw4Sep 12, 2026SSRF via webpush endpoint validation bypass — registration-time check does not match send-time resolution/redirect behavior
- Affected
- >= 0.18.0-rc1
- mediumGHSA-jqwr-vgw4-jmv7Sep 12, 2026SSRF via unvalidated Web Push subscription endpoint (any authenticated user, not just admin)
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-rc1
- highGHSA-74fj-g666-3rv9Sep 12, 2026Custom-role users can brute-force any account's password via /users/{username}/password (no rate limit)
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-rc1
- mediumGHSA-2vw5-qcf8-4jm6Sep 12, 2026GenAI review summary discloses activity/metadata from cameras outside the caller's access (cross-camera information disclosure)
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-rc1
- mediumGHSA-h7qp-3pmh-jhmxSep 12, 2026GET /sub_labels and GET /labels disclose face-recognition/LPR data and generic object labels from cameras outside the caller's role-scoped access
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-beta1
- mediumGHSA-pjjx-9f4v-f8jxSep 12, 2026Zero-area face detection crashes the shared, unsupervised EmbeddingMaintainer thread, silently disabling face recognition/LPR/semantic-search/GenAI-description for ALL cameras
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-beta1
- lowGHSA-f4g2-5496-9233Sep 12, 2026Path traversal in face-recognition management endpoints (arbitrary file write via register, arbitrary file delete via delete)
- Affected
- <= 0.17.2
- Patched in
- >=0.18.0-rc1
- mediumGHSA-q8jx-q884-jcq9Aug 8, 2026Frigate: attacker-controlled `recognized_license_plate` regex reaches Python `re.search` on the serialized DB queue thread, letting any authenticated (viewer) user freeze the whole application (ReDoS)
- Affected
- <= 0.17.2
- Patched in
- >= 0.18.0-beta3
- mediumGHSA-4xp7-86rr-9758Aug 8, 2026Frigate embeds go2rtc v1.9.14 with RTSP negative Content-Length panic
- Affected
- >= 0.18.0-beta1
- mediumGHSA-vff9-46ww-fjjmAug 8, 2026Broken Object-Level Authorization (IDOR) in motion search job endpoints allows cross-camera data access
- Affected
- >=0.18.0-beta1, <0.18.0-beta3
- Patched in
- >=0.18.0-beta3
- highGHSA-cch2-w38h-8f44Aug 8, 2026networking.listen.internal changes take effect immediately despite the "restart required" warning, granting unauthenticated admin access
- Affected
- v0.18.0-beta1, v0.18.0-beta2
- Patched in
- >=v0.18.0-beta3
- highCVE-2026-75608Jun 28, 2026Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
- Affected
- 0.17.1
- mediumGHSA-hh3j-7g2f-43j2Jun 28, 2026go2rtc WebSocket live stream camera access bypass (role-restricted users)
- Affected
- <= 0.17.1
- Patched in
- >=0.17.2
- highCVE-2026-75607Jun 28, 2026WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
- Affected
- 0.17.1
- Patched in
- >=0.17.2
- mediumGHSA-74x4-gw64-2mq5Jun 28, 2026Camera ACL bypass via Nginx static locations allows authenticated users to access recordings from unauthorized cameras
- Affected
- All versions
- highCVE-2026-54652Jun 28, 2026Authenticated viewer can read /api/logs/frigate and /api/logs/nginx, exposing the auto-generated admin password and camera RTSP/ONVIF credentials (viewer-to-admin privilege escalation)
- Affected
- 0.17.1
- criticalGHSA-wwww-5h25-jf98Jun 28, 2026Authenticated Admin Can Achieve RCE via go2rtc Stream API — exec: Filter Not Enforced at API Layer
- Affected
- >= 0.13.0
- Patched in
- >=0.17.2
- mediumGHSA-4vfc-hxpj-f7x7Jun 28, 2026RTSP credentials leak to viewer role via nginx proxy_cache
- Affected
- <= 0.17.1
- Patched in
- >=0.17.2
- criticalGHSA-r57j-5jm9-hpccJun 28, 2026Incomplete patch of CVE-2026-25643: go2rtc exec:/echo:/expr: prefix block is bypassed when a stream value is a YAML mapping with a `url` key (RCE + container escape)
- Affected
- <= 0.17.1
- Patched in
- >=0.17.2
- highGHSA-pqfr-m69j-4mq2Jun 28, 2026Incomplete patch of CVE-2025-62382: `image_path` backslash-separator bypass of `pathvalidate.sanitize_filepath` + `startswith(CLIPS_DIR)` reaches `shutil.copy` arbitrary host-file read
- Affected
- >= 0.16.2, <= 0.17.1
- Patched in
- >=0.17.2
- mediumCVE-2026-33469Mar 22, 2026Authenticated users can read the full unredacted configuration via `/api/config/raw
- Affected
- >= 0.17.0, < 0.17.1
- Patched in
- >= 0.17.1
- mediumCVE-2026-33470Mar 22, 2026Cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp
- Affected
- >= 0.17.0, < 0.17.1
- Patched in
- >= 0.17.1
- criticalCVE-2026-25643Jan 29, 2026Authenticated Remote Command Execution (RCE) and Container Escape
- Affected
- <= 0.16.3
- Patched in
- >= 0.16.4