Threats tagged 'ghsa-h3rm-rxwj-hfmw'

CVE-2025-13131 is a vulnerability in Sonarr version 4.0.15.2940 involving incorrect default permissions in a service component. The issue requires local access and is considered low severity by the vendor because exploitation would require either an intentional change to a highly privileged service account or an attacker having admin-level access. A fix is planned for the next major release, version 5.