CVE-2024-56362

7.1HIGH

Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice intro

Published: 12/23/2024Updated: 8/26/2025
View on NVDView on MITRE

Description

Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1.

AI AnalysisPowered by AI

Affected Products

navidromenavidrome

References