CVE-2026-32315

motionEye (mEye) is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions (-rw-r--r--), making it readable by any local user on the system. This file contains sensitive data including the admin password hash, which can be leveraged by other vulnerabilities to escalate privileges. Additionally, per-camera configuration files (camera-*.conf) are also created with the same 644 permissions, potentially exposing camera-specific credentials and settings. The exposed SHA1 admin password hash can be cracked offline to recover the plaintext password, used directly to forge authenticated admin API requests via the signature authentication weakness (GHSA-45h7-499j-7ww3), and chained with the OS command injection flaw (CVE-2025-60787) to escalate a local unprivileged user to the Motion daemon user (often root), enabling full system compromise. This issue has been fixed in version 0.44.0.

• CWE-200
• CWE-522
• CWE-732

• https://github.com/motioneye-project/motioneye/releases/tag/0.44.0
• https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rhgp-6wq6-9j67
• https://github.com/motioneye-project/motioneye/security/advisories/GHSA-rhgp-6wq6-9j67

Published

Jun 24, 2026

Last Modified

Jun 25, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3231The Checkout Field Editor (Checkout Manager) for WooCommerce…7.2
• CVE-2026-32310Cryptomator encrypts data being stored on cloud infrastructu…5.3
• CVE-2026-32311Flowsint is an open-source OSINT graph exploration tool desi…9.8
• CVE-2026-32312GLPI is a free asset and IT management software package. In …4.3
• CVE-2026-32313xmlseclibs is a library written in PHP for working with XML …8.2
• CVE-2026-32314Yamux is a stream multiplexer over reliable, ordered connect…7.5
• CVE-2026-32316jq is a command-line JSON processor. An integer overflow vul…7.5
• CVE-2026-32317Cryptomator for Android offers multi-platform transparent cl…5.9
• CVE-2026-32318Cryptomator for IOS offers multi-platform transparent client…5.9
• CVE-2026-32319Ella Core is a 5G core designed for private networks. Prior …7.5
• CVE-2026-32320Ella Core is a 5G core designed for private networks. Prior …7.5
• CVE-2026-32321ClipBucket v5 is an open source video sharing platform. An a…8.8