CVE-2026-120320 | jxxghp MoviePilot up to 3.1.2 Workflow Fork Endpoint app/chain/workflow.py WorkflowExecutor.restore_context deserialization

November 1, 2026 Yanac

A vulnerability was found in jxxghp MoviePilot up to 3.1.2. It has been declared as problematic. This vulnerability affects the function WorkflowExecutor.restore_context of the file app/chain/workflow.py of the component Workflow Fork Endpoint. Executing a manipulation can lead to deserialization.

This vulnerability is tracked as CVE-2026-120320. The attack can be launched remotely. Moreover, an exploit is present.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More