CVE-2026-10107: MoviePilot v2 SSRF in Image Proxy Allows Internal Network Access

Technical summary

CVE-2026-10107 is a server-side request forgery (SSRF) vulnerability in MoviePilot v2's image proxy endpoint. The vulnerability arises from improper validation in the SecurityUtils.is_safe_url function, which performs domain-membership checking against an allowlist but fails to filter private IP ranges (RFC 1918), loopback addresses (127.0.0.1), or link-local addresses. Authenticated attackers who supply a valid resource_token cookie can bypass the domain check by crafting URLs whose domain matches an allowed entry while the underlying IP resolves to an internal resource. This allows enumeration and data exfiltration from internal network services such as Jellyfin, Emby, or Plex. The vulnerability is classified as CWE-918 (Server-Side Request Forgery).

Business impact

This vulnerability exposes organizations running MoviePilot v2 to internal network reconnaissance and data theft. An insider or compromised user account can enumerate and access media servers, databases, or other services on the internal network that are assumed to be protected by network segmentation. Organizations relying on MoviePilot as a gateway or integration point for media management face risk of intellectual property exfiltration, unauthorized access to personal or sensitive media libraries, and potential lateral movement within the network if those internal services have further vulnerabilities.

Affected systems

MoviePilot v2 is affected. The vulnerability requires an authenticated context—an attacker must possess valid credentials and a resource_token cookie—but no special network position or user interaction is needed beyond the initial authentication.

Exploitability

Exploitability is moderate to high for insiders or those with valid credentials. The attack surface is limited to authenticated users, which reduces the immediate threat from the broader internet. However, credential compromise is common, and the low complexity of crafting a malicious request (a specially formatted URL plus cookie) makes exploitation straightforward once access is gained. No user interaction is required. The impact is also broad—the vulnerability allows access to any internal service reachable from the MoviePilot server, making it useful for reconnaissance and data theft.

Remediation

Apply a security patch when available from the MoviePilot development team. In the interim, restrict network access to MoviePilot's image proxy endpoint, limit authenticated user accounts to those with a genuine need, and implement network segmentation to isolate internal services from the MoviePilot server. Monitor outbound requests from MoviePilot to internal IP ranges for signs of abuse. Verify that your allowlist configuration does not inadvertently permit internal domain names to resolve to private addresses.

Patch guidance

Monitor the MoviePilot project for version updates addressing CVE-2026-10107. Patches should include validation logic that explicitly blocks RFC 1918 private IP ranges, loopback addresses, and link-local addresses, even if they are reached through domain-name resolution. When a patch is released, prioritize deployment in environments where MoviePilot is connected to sensitive internal networks. Verify against the vendor advisory that the patch has fixed the domain-to-IP bypass scenario.

Detection guidance

Monitor network traffic from MoviePilot servers for outbound connections to private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8) or unusual internal service access. Review web server logs for requests to the image proxy endpoint that contain unusual URL parameters or domain names that resolve to internal addresses. Check authentication logs for access patterns that correlate with internal network scanning. Use DNS query logging to identify when internal domains are queried from MoviePilot, and correlate with proxy requests to that domain.

Why prioritize this

This is a high-severity issue (CVSS 7.7) with broad impact on confidentiality. While it requires prior authentication, authenticated access is often available to multiple users within an organization, and credentials are frequently compromised. The ability to enumerate and access internal services without additional barriers makes it a strong candidate for rapid remediation, especially in networks where MoviePilot is trusted to sit on a boundary between user-facing and internal systems.

Risk score, explained

The CVSS 3.1 score of 7.7 (HIGH) reflects high confidentiality impact (attackers can read data from internal services), unchanged integrity and availability, and a network-accessible attack vector. The score is elevated by the broad scope (the attacker accesses systems beyond the vulnerable component itself), but mitigated by the requirement for prior authentication (PR:L) and low complexity exploitation (AC:L). No user interaction is required. This profile—high-impact, remotely exploitable, but authentication-gated—justifies a HIGH severity rating and should trigger rapid patching in most risk-management frameworks.

Frequently asked questions