MoviePilot v2 contains a SSRF flaw in the image proxy endpoint. The flaw allows authenticated attackers to supply a URL whose domain passes a basic allowlist check performed by SecurityUtils.is_safe_url. Because the check only verifies domain membership and does not block private, loopback or link‑local addresses, attackers can instruct MoviePilot to fetch arbitrary internal URLs, potentially accessing services such as Jellyfin, Emby or Plex and exfiltrating data from internal resources. This vulnerability is classified as CWE‑918.

The affected product is MoviePilot v2, specifically versions before the 2.13.2 release. The 2.13.2 release, which includes the fix, is available from the project’s GitHub releases page.

The CVSS score is 7, indicating a medium‑to‑high severity. EPSS data are not available, but the lack of a KEV listing suggests that active exploitation has not yet been reported. The attack requires an authenticated session with a valid resource_token cookie; once authenticated, the attacker can request any URL that matches the allowlist domain, and due to the permissive check, internal network addresses are reachable. The potential impact ranges from internal discovery to full data exfiltration depending on the attacker’s objectives.