CVE-2026-49246

Jellyfin is an open source self hosted media server. Prior to 10.11.10, a specifically crafted MKV file containing forged filename tags can be leveraged to exploit missing path sanitization during playback. Jellyfin treats the MKV file name tag on MKV attachments as trusted and passes it unsanitized into Path.Combine(attachmentFolder, fileName) inside PathManager.GetAttachmentPath. Because .NET's Path.Combine neither normalises .. nor rejects a rooted second argument, a crafted MKV can redirect Jellyfin's MKV attachment extraction to any absolute path on disk. This triggers on any playback action of the affected video on a client which will attempt to burn in the subtitles by default.g This vulnerability is fixed in 10.11.10.

• CWE-22

• https://github.com/jellyfin/jellyfin/security/advisories/GHSA-f47c-m7gr-q92j

Published

Jun 24, 2026

Last Modified

Jun 25, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-49234When sending a specifically crafted non-UTF-8 string as sele…7.5
• CVE-2026-49235When Routinator encounters a file via RRDP using a specifica…7.5
• CVE-2026-49237An issue was discovered in Canonical Multipass for macOS bef…7.8
• CVE-2026-49238An issue was discovered in Canonical Multipass before versio…8.4
• CVE-2026-4924Improper authentication in the two-factor authentication (2…8.2
• CVE-2026-49241The Angular Language Service VS Code Extension provides a ri…8.8
• CVE-2026-49247Jellyfin is an open source self hosted media server. From 10…8.8
• CVE-2026-49248OneDev is a Git server with CI/CD, kanban, and packages. In …8.3
• CVE-2026-4925Improper access control in the users MFA feature in Devoluti…5
• CVE-2026-49252deepstream is a server that allows clients and backend servi…9.9
• CVE-2026-49256Discourse is an open-source discussion platform. Prior to 20…7.5
• CVE-2026-49257mcp-pinot is a Python-based Model Context Protocol (MCP) ser…10