Command Injection in MoviePilot

MoviePilot through version 3.1.5 contains a critical command injection vulnerability. The flaw exists within the application's handling of untrusted content, specifically during tasks involving web browsing, searching, or parsing torrent metadata. The application utilizes a tool named ExecuteCommandTool, which passes inputs to the asyncio.create_subprocess_shell function in Python. Attackers can embed malicious instructions within untrusted data that trick the system into invoking this tool. Furthermore, the vulnerability includes a logic flaw in the command safety validation mechanism, where an attacker can set confirm_dangerous to true to bypass the denylist. If the application is running in an environment with an active admin session, the attacker can leverage the is_admin context to execute arbitrary OS commands on the host machine. This poses a significant risk to the integrity and confidentiality of the host environment.

Impact

Successful exploitation allows for arbitrary code execution with the privileges of the MoviePilot service process. This can lead to full system compromise, data exfiltration, and lateral movement within the network. This vulnerability affects all MoviePilot deployments running version 3.1.5 or earlier.

Recommendation

1. Patch all instances of MoviePilot by upgrading to the latest version that remediates CVE-2026-77931.
2. Implement strict network egress filtering for the container or server running MoviePilot to prevent reverse shell callbacks.
3. Ensure the MoviePilot service runs with the least privilege necessary, specifically avoiding execution as the root user.
4. Audit logs for anomalous subprocess execution patterns, particularly those originating from the MoviePilot process tree involving sh or bash.