Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2026-25643 β€” AI Deep Analysis Summary

CVSS 9.1 Β· Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Frigate NVR allows **Remote Code Execution (RCE)** via command injection.…

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause**: **CWE-78** (OS Command Injection). πŸ› **Flaw**: User inputs in video stream configurations are **not sanitized** before being passed to the `exec` instruction.

Q3Who is affected? (Versions/Components)

πŸ“¦ **Affected**: **Frigate** by Blake Blackshear. πŸ“‰ **Versions**: All versions **prior to 0.16.4** (i.e., ≀ 0.16.3).

Q4What can hackers do? (Privileges/Data)

πŸ’€ **Capabilities**: Hackers gain **Remote Command Execution**. πŸ“Š **Impact**: High severity (CVSS 9.8). They can read, modify, or delete data, and escalate privileges to root/admin level.

Q5Is exploitation threshold high? (Auth/Config)

πŸ” **Threshold**: **Medium**. ⚠️ **Auth**: Requires **High Privileges** (PR:H) to configure streams. 🌐 **Access**: Network accessible (AV:N).

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ” **Exploits**: **Yes**, public PoCs exist. πŸ“‚ **Links**: GitHub repos by `jduardo2704` and `joshuavanderpoll` demonstrate blind RCE via go2rtc exec injection.

Q7How to self-check? (Features/Scanning)

πŸ”Ž **Check**: Look for Frigate versions **< 0.16.4**. πŸ“ **Config**: Check `config.yaml` for custom video stream inputs that might contain unsanitized user data.

Q8Is it fixed officially? (Patch/Mitigation)

βœ… **Fixed**: **Yes**. πŸ› οΈ **Patch**: Upgrade to **Frigate v0.16.4** or later. πŸ“’ **Advisory**: See GitHub Security Advisory GHSA-4c97-5jmr-8f6x.

Q9What if no patch? (Workaround)

🚧 **Workaround**: If unpatched, **restrict network access** to the NVR. 🚫 **Mitigation**: Do not allow untrusted users to modify video stream configurations.

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Urgency**: **Critical**. πŸš€ **Priority**: Patch immediately. The CVSS score is **9.8** (Critical), and public exploits are available.