CVE-2026-44775: CWE-306: Missing Authentication for Critical Function in Kareadita Kavita
Kavita versions prior to 0.9.0 have a vulnerability where the ReaderController. GetImage endpoint allows unauthenticated access to page images from any chapter in any library. The endpoint accepts an apiKey parameter but does not validate it, enabling attackers to enumerate all content due to sequential entity IDs. This issue is fixed in version 0.9.0.
AI Analysis
Technical Summary
CVE-2026-44775 is a missing authentication vulnerability (CWE-306) in the Kavita reading server before version 0.9.0. The ReaderController.GetImage endpoint is marked with [AllowAnonymous], permitting unauthenticated users to access page images. Although the endpoint accepts an apiKey parameter, it is never validated, allowing attackers to enumerate content by exploiting sequential entity IDs. This vulnerability was addressed and fixed in version 0.9.0.
Potential Impact
An unauthenticated attacker can access and enumerate all page images hosted on the Kavita server, potentially exposing all content without any authentication. This could lead to unauthorized disclosure of content stored on the server. There is no indication of privilege escalation or other impacts beyond unauthorized read access.
Mitigation Recommendations
Upgrade Kavita to version 0.9.0 or later, where this vulnerability has been fixed. Since the vendor advisory indicates the issue is resolved in 0.9.0, applying this official fix is the recommended remediation. Patch status is not explicitly stated beyond this fix version, so verify with the vendor for any additional updates.
CVE-2026-44775: CWE-306: Missing Authentication for Critical Function in Kareadita Kavita
Description
Kavita versions prior to 0.9.0 have a vulnerability where the ReaderController. GetImage endpoint allows unauthenticated access to page images from any chapter in any library. The endpoint accepts an apiKey parameter but does not validate it, enabling attackers to enumerate all content due to sequential entity IDs. This issue is fixed in version 0.9.0.
CVSS v4.0
Score 6.9medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-44775 is a missing authentication vulnerability (CWE-306) in the Kavita reading server before version 0.9.0. The ReaderController.GetImage endpoint is marked with [AllowAnonymous], permitting unauthenticated users to access page images. Although the endpoint accepts an apiKey parameter, it is never validated, allowing attackers to enumerate content by exploiting sequential entity IDs. This vulnerability was addressed and fixed in version 0.9.0.
Potential Impact
An unauthenticated attacker can access and enumerate all page images hosted on the Kavita server, potentially exposing all content without any authentication. This could lead to unauthorized disclosure of content stored on the server. There is no indication of privilege escalation or other impacts beyond unauthorized read access.
Mitigation Recommendations
Upgrade Kavita to version 0.9.0 or later, where this vulnerability has been fixed. Since the vendor advisory indicates the issue is resolved in 0.9.0, applying this official fix is the recommended remediation. Patch status is not explicitly stated beyond this fix version, so verify with the vendor for any additional updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-07T19:20:44.689Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a15e03a891d628fdc67d92c
Added to database: 05/26/2026, 18:02:34 UTC
Last enriched: 06/02/2026, 21:20:17 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 52
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.