Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one camera can access snapshots from other cameras. This is possible through a chain of two authorization problems: `/api/timeline` returns timeline entries for cameras outside the caller's allowed camera set, then `/api/events/{event_id}/snapshot-clean.webp` declares `Depends(require_camera_access)` but never actually validates `event.camera` after looking up the event. Together, this allows a restricted user to enumerate event IDs from unauthorized cameras and then fetch clean snapshots for those events. Version 0.17.1 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-33470 Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one… https://www.cve.org/CVERecord?id=CVE-2026-33470
Post summary
The post discloses that CVE‑2026‑33470 affects Frigate NVR version 0.17.0, but provides no proof of concept, exploit code, active exploitation evidence, or patch.
🚨*CVE* CVE-2026-33470 Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In version 0.17.0, a low-privilege authenticated user restricted to one… https://www.cve.org/CVERecord?id=CVE-2026-33470 ----- Traducción: CVE-2026-33470 Fri… http://infoflow.cloud`
Post summary
The post announces CVE-2026-33470 affecting Frigate NVR version 0.17.0, noting a low‑privilege authenticated user vulnerability, but provides no further exploitation, mitigation, or PoC details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | frigate | frigate | 0.17.0 | - | - |