CVE-2026-33125 - Vulnerability Analysis

Overview

Frigate <= 0.16.2 contains a broken access control vulnerability caused by improper permission checks, letting users with viewer role delete admin and low-privileged user accounts, exploit requires viewer role.

Severity & Score

Impact

Attackers with viewer role can delete user accounts, causing denial of service and data integrity issues.

Mitigation

Upgrade to version 0.16.3.

References

• https://github.com/blakeblackshear/frigate/releases/tag/v0.16.3
• https://github.com/blakeblackshear/frigate/security/advisories/GHSA-vg28-83rp-8xx4

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner