CVE-2026-40605

Name of the Vulnerable Software and Affected Versions Tautulli versions prior to 2.17.1

Description Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A path traversal issue in the cache deletion endpoint allows authenticated API access to delete directories outside the configured cache path, which can lead to arbitrary data loss and service disruption. Path traversal is a technique that allows an attacker to access files or directories outside the intended folder by using special characters like "../".

Recommendations Update to version 2.17.1.