PatchTheCVEnavidrome vulnerabilities
Recent CVEs affecting navidrome products. 8 tracked.
navidrome has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-02-04. Highest priority: CVE-2024-47062 (score 59/100).
- CVE-2026-25579 MEDIUM 6.5 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2026-25578 MEDIUM 6.1 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2025-48949 CRITICAL 9.8 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2025-48948 MEDIUM 6.5 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2025-27112 MEDIUM 6.5 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2024-56362 HIGH 7.1 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2024-47062 HIGH 8.8 UPGRADE Navidrome is an open source web-based music collection server and streamer
- CVE-2024-41259 CRITICAL 9.1 UPGRADE Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulat
FAQ
How do I fix navidrome vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is navidrome being exploited right now?
None of the tracked navidrome CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which navidrome CVE should I patch first?
CVE-2024-47062 currently ranks highest (59/100): Navidrome is an open source web-based music collection server and streamer.