Junglewise Threat Intelligence

CVE-2026-25579: GO-2026-4411 - Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` e

CVE-2026-25579 · Severity: medium · CVSS 4 · Published 2026-02-05

Technologies: github.com/navidrome/navidrome (Go). Vendors: Go.

Executive brief

Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints in github.com/navidrome/navidrome

Affected products

  • Go github.com/navidrome/navidrome

Related threats