Runtipi

5 CVEs across 1 Runtipi products. Browse Runtipi vulnerabilities, severities, and proof-of-concept exploits.

Runtipi products with known CVEs

ProductCVEs
Runtipi5
Runtipi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-47277Medium6.52026-06-17Runtipi is a personal homeserver orchestrator. In versions 4.9.1 through 4.9.3, Runtipi serves marketplace app logos from files inside cloned app-store reposit…
CVE-2026-32729High8.12026-03-16Runtipi is a personal homeserver orchestrator. Prior to 4.8.1, The Runtipi /api/auth/verify-totp endpoint does not enforce any rate limiting, attempt counting…
CVE-2026-31881High7.72026-03-11Runtipi is a personal homeserver orchestrator. Prior to 4.8.0, an unauthenticated attacker can reset the operator (admin) password when a password-reset reques…
CVE-2026-25116High7.62026-01-29Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the `Us…
CVE-2026-24129High8.02026-01-22Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authentica…