high7.5
CVE-2026-31831
Tautulli is a Python based monitoring and tracking tool for Plex Media Server.
Impact
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. This issue has been patched in version 2.17.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tautulli | Tautulli | before 2.17.0 |