CVE-2026-119550

Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows authenticated users to read hidden item IDs by requesting public or shared playlists. Restricted or parental-controlled users can obtain GUIDs of inaccessible library items from...

CVE-2026-119550 Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}

Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows authenticated users to read hidden item IDs by requesting public or shared playlists. Restricted or parental-controlled users can obtain GUIDs of inaccessible library items from...

CVE-2026-119550

Jellyfin versions through 12.4 are affected by an information disclosure vulnerability in PlaylistsController.GetPlaylist . Authenticated users can request public or shared playlists to read hidden item IDs . Specifically, restricted or parental-controlled users can extract GUIDs of inaccessible ...

EUVD-2026-113815

Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows authenticated users to read hidden item IDs by requesting public or shared playlists. Restricted or parental-controlled users can obtain GUIDs of inaccessible library items from...

PT-2026-133488

Jellyfin through 12.4 contains an information disclosure vulnerability in PlaylistsController.GetPlaylist that allows authenticated users to read hidden item IDs by requesting public or shared playlists. Restricted or parental-controlled users can obtain GUIDs of inaccessible library items from...