runtipi vulnerabilities and fixes

Recent CVEs affecting runtipi, with upgrade or downgrade steps. 3 tracked.

runtipi has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-16. Highest priority: CVE-2026-24129 (score 49/100).

• CVE-2026-32729 HIGH 8.1 UPGRADE Runtipi is a personal homeserver orchestrator
• CVE-2026-25116 HIGH 7.6 UPGRADE Runtipi is a personal homeserver orchestrator
• CVE-2026-24129 HIGH 8.0 UPGRADE Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single ser

FAQ

How do I fix runtipi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is runtipi being exploited right now?

None of the tracked runtipi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which runtipi CVE should I patch first?

CVE-2026-24129 currently ranks highest (49/100): Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single ser.

RSS feed for runtipi · ← Back to latest CVEs