CVE ID :CVE-2026-11416 Published : June 5, 2026, 9:42 p.m. | 46ย minutes ago Description :MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenating the configured download directory with a filename taken directly from remote cloud API metadata without basename norm
MoviePilot Path Traversal
Vulnerability
CVE-2026-11416
MITRE CVE High
Refer to CVE-2026-11416 NVD advisory