CVE-2026-85156

Name of the Vulnerable Software and Affected Versions AVideo (affected versions not specified)

Description Improper validation of access controls on the public channel page allows unauthenticated visitors to view unlisted and group-restricted videos. This occurs through the use of hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive content, such as full URLs to unlisted videos and thumbnails of member-only content, bypassing the hidePrivateVideos setting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.