jxxghp MoviePilot

• CVE-2026-120320 Medium 4.7 jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization 0.4%
• CVE-2026-77931 High 8.8 MoviePilot 3.1.5 Command Injection via ExecuteCommandTool 1.0%
• CVE-2026-16224 Medium 4.3 jxxghp MoviePilot Application API improper authorization 0.4%
• CVE-2026-11416 High 8.1 MoviePilot Path Traversal via Cloud Storage Download Handlers 0.5%
• CVE-2026-10107 High 7.7 MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint 0.2%