CVE-2026-120320

A deserialization vulnerability exists in jxxghp MoviePilot (versions up to 3.1.2 ) within the Workflow Fork Endpoint component. Specifically, the WorkflowExecutor.restore_context function in app/chain/workflow.py is susceptible to manipulation, which can be triggered remotely. This flaw allows f...

EUVD-2026-114923

A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecutor.restorecontext of the file app/chain/workflow.py of the component Workflow Fork Endpoint. Executing a manipulation can lead to deserialization. The attack can be launched...