CVE-2026-49246 | Jellyfin up to 10.11.9 MKV File path traversal

June 24, 2026 Yanac

A vulnerability labeled as critical has been found in Jellyfin up to 10.11.9. Impacted is an unknown function of the component MKV File Handler. The manipulation results in path traversal.

This vulnerability was named CVE-2026-49246. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More