High severity7.5NVD Advisory· Published Mar 30, 2026· Updated Apr 2, 2026
CVE-2026-31831
CVE-2026-31831
Description
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. This issue has been patched in version 2.17.0.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/Tautulli/Tautulli/security/advisories/GHSA-xp55-2pf4-fv8mnvdExploitVendor Advisory
- github.com/Tautulli/Tautulli/releases/tag/v2.17.0nvdRelease Notes
News mentions
0No linked articles in our index yet.