v0.18.1 v0.18.2
blakeblackshear/frigateOct 13, 2026 → Oct 15, 20262 days between releases
What's New
Addresses critical RCE vulnerabilities in go2rtc and websocket paths.
Improvements
- Normalizes request paths in media authentication checks.
Bug Fixes
- Fixes source scheme bypasses in go2rtc exec-filter.
- Fixes direct websocket path vulnerabilities.
- Normalizes request paths in media authentication checks.
Upgrade Notes
This is a critical security update addressing Remote Code Execution (RCE) vulnerabilities. Ensure your go2rtc configuration is updated to the latest version to avoid exploits. No configuration changes are required, but you should restart the service immediately.
The Two Releases
0.18.1 Release
Oct 13, 2026· 8 days ago
This maintenance release focuses on critical security patches, performance optimizations for Intel QSV hardware acceleration, and various bug fixes to improve recording stability and user interface reliability.
Full release notes0.18.2 Release
Oct 15, 2026· 6 days ago
This maintenance release for Frigate 0.18 focuses on critical security updates to address remote code execution vulnerabilities. The update fixes exploits related to go2rtc, websocket paths, and media authentication checks. Docker images are available for various architectures.
Full release notes