CVE-2025-62382 is an external control of file name or path vulnerability (CWE-73) affecting Frigate, a network video recorder software that performs real-time local object detection for IP cameras. In versions prior to 0.16.2, the export workflow allows an authenticated operator to nominate any filesystem location as the thumbnail source for a video export. This user-supplied path is copied verbatim into the publicly served clips directory without proper validation or sanitization. Consequently, a low-privilege user with API access can exploit this to read arbitrary files residing on the host system by tricking the export process into copying sensitive files into the public directory before cleanup occurs. The vulnerability hinges on a race condition during the file copying process, which must be exploited within a short time window. This attack vector enables an adversary to escalate from merely viewing camera footage to exfiltrating sensitive data such as configuration files, secrets, or user data stored on the appliance. The flaw violates the principle of least privilege by allowing the export subsystem to access arbitrary paths. The vulnerability has a CVSS 3.1 base score of 7.7, reflecting high severity due to network attack vector, low attack complexity, and significant confidentiality impact without affecting integrity or availability. The issue is resolved in Frigate version 0.16.2. No known exploits have been reported in the wild as of the publication date. The vulnerability requires authentication but no user interaction beyond API access. This makes it a critical concern for environments where multiple users have API privileges. The vulnerability underscores the importance of strict input validation and access controls in software handling sensitive data exports.

For European organizations, this vulnerability poses a significant risk to the confidentiality of sensitive data stored on Frigate NVR appliances. Many organizations in sectors such as critical infrastructure, transportation, retail, and public safety rely on IP camera systems for security monitoring. Exploitation could lead to unauthorized disclosure of configuration files, credentials, or personal data, potentially violating GDPR and other data protection regulations. The ability for a low-privilege user to escalate access and exfiltrate data increases insider threat risks and could facilitate further lateral movement within networks. The exposure of secrets and configuration data could also enable attackers to compromise other connected systems or disrupt surveillance operations. Given the widespread adoption of IP camera solutions in European enterprises and public institutions, the vulnerability could impact a broad range of organizations, especially those with less mature API access controls. The lack of known exploits in the wild reduces immediate risk but does not eliminate the threat, as the vulnerability is straightforward to exploit once authenticated. Failure to patch could lead to regulatory penalties, reputational damage, and operational disruptions.

European organizations should immediately upgrade all Frigate installations to version 0.16.2 or later to remediate this vulnerability. Until upgrades are completed, restrict API access strictly to trusted and authenticated users, employing strong authentication mechanisms and role-based access controls to minimize exposure. Monitor API usage logs for unusual export requests or attempts to specify suspicious file paths. Implement network segmentation to isolate NVR appliances from broader enterprise networks, limiting lateral movement opportunities. Employ host-based intrusion detection systems (HIDS) to detect anomalous file access or copying activities on the Frigate host. Review and harden file system permissions to ensure that the Frigate process cannot access sensitive files unnecessarily. Conduct regular audits of exported video clips directories to detect unauthorized files. Educate operators and administrators about the risks of arbitrary path specification and enforce policies prohibiting unsafe export practices. Finally, maintain up-to-date backups of configuration and user data to enable recovery in case of compromise.