Medium
Tautulli: Open redirect via whitespace bypass in /auth/redirect
Type: advisorySource: Official CVE List
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenticated /auth/redirect endpoint in plexpy/webauth.py removes forward slashes from the user-controlled redirec…
Products: TautulliCVEs: CVE-2026-54915