PyPI/motioneye: critical 9.8

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

Action: Upgrade motioneye to 0.44.0 or later.

pip install motioneye==0.44.0

Affected

Fixed versions

Sources

• osv: GHSA-qxvg-h7q2-hcxh
• https://github.com/motioneye-project/motioneye/security/advisories/GHSA-qxvg-h7q2-hcxh
• https://github.com/motioneye-project/motioneye

published 2026-06-23T18:53:04Z · modified 2026-06-23T19:00:08.688867471Z · JSON