A vulnerability classified as problematic was found in Tautulli up to 2.16.x. Affected by this issue is some unknown functionality of the file /newsletter/image/images of the component API Endpoint. Executing a manipulation can lead to relative path traversal. This vulnerability is handled as CVE-2026-31831. The attack can be executed remotely.
| Vendor | Product | Versions |
|---|---|---|
| null | tautulli | < 2.17.0 |
Updated vendor to Tautulli, changed severity to HIGH, noted that the vulnerability is actively exploited, and clarified that no exploit is available.
Initial creation
