PT-2026-39748 · Advplyr · Audiobookshelf

Bugbunny-Research · Published 2026-05-11 · Updated 2026-05-19 · CVE-2026-42883

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions prior to 2.32.2

Description An issue exists in the 'GET /api/libraries/:id/download' endpoint where the system validates if a user has access to the library specified in the URL path but fails to constrain the fetched downloadable items to that specific library. Consequently, an authenticated user with download permissions and access to at least one library can exfiltrate the full file contents of items from any other library, including those to which they are explicitly denied access, by providing specific item IDs.

Recommendations Update to version 2.32.2.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-42883

Affected Products

Audiobookshelf

References · 3

• 🔥 https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-6rvg-w3f5-9gq5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42883 · Security Note
• https://t.me/cveNotify/164075 · Telegram Post