CVE-2026-33125

Published: Mar 20, 2026Modified: Mar 20, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. This issue has been patched in version 0.16.3.

Affected (1)

Products: Frigate: Frigate

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Frigate Frigate	Before 0.16.3

Related CWEs

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://github.com/blakeblackshear/frigate/releases/tag/v0.16.3

Source: security-advisories@github.com

Release Notes

https://github.com/blakeblackshear/frigate/security/advisories/GHSA-vg28-83rp-8xx4

Source: security-advisories@github.com

ExploitVendor Advisory

Timeline

No history available yet.