Medium severity4.3OSV Advisory· Published Apr 15, 2025· Updated Jun 17, 2026
CVE-2025-32945
CVE-2025-32945
Description
The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request, without checking if it belongs to the user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: v0.0.11-alpha, v0.0.12-alpha, v0.0.13-alpha, …
Patches
Vulnerability mechanics
References
2- research.jfrog.com/vulnerabilities/peertube-arbitrary-playlist-creation-rest/nvdExploitThird Party Advisory
- github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1nvdRelease Notes
News mentions
0No linked articles in our index yet.