Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111728— Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings

Quick assessment

Affected
5rahim Seanime
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Seanime v3.7.0 至 v3.10.3 版本存在参数注入漏洞。由于授权机制不当，未经验证的局域网（LAN）或 Tailnet 客户端可通过将 设置为 ，并通过 字段传入攻击者控制的 和 ，从而绕过 privileged mediastream 设置的安全防护。这些参数会被原样追加到 ffmpeg 的命令行参数向量中。攻击者可通过 mediastream 请求和 HLS 播放列表端点触发该漏洞，以运行 Seanime 的用户身份在主机上实现任意文件写入和文件截断。此外，注入的输入选项还可能利用 ffmpeg

CVSS 5.4 · Medium EPSS 0.26% · P16

Affected Version Matrix 1

VendorProduct Version RangeStatus
5rahim Seanime 3.7.0< 3.10.4 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111728

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings
Source: CVE Program / CVE List V5
Vulnerability Description
Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or Tailnet clients to bypass the privileged mediastream settings guard by setting transcodeHwAccel to custom and supplying attacker-controlled decodeFlags and encodeFlags via the transcodeHwAccelCustomSettings field, which are appended verbatim to the ffmpeg argument vector. Attackers can trigger execution via the mediastream request and HLS playlist endpoints to achieve arbitrary file write and file truncation on the host as the user running seanime, with the injected input options also enabling potential arbitrary local file read and outbound data exfiltration through ffmpeg's protocol handlers.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
参数注入或修改
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
5rahim Seanime 3.7.0 ~ 3.10.4 -

II. Public POCs for CVE-2026-111728

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111728

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-111728 (1)

Vendor Advisories for CVE-2026-111728 (1)

Vendor Pages for CVE-2026-111728 (1)

IV. Related Vulnerabilities

Same weakness: CWE-88

V. Comments for CVE-2026-111728

No comments yet

Leave a comment