v0.18.2
blakeblackshear/frigatev0.18.2Oct 15, 2026by blakeblackshear
Upgrading?
AI Summary
This maintenance release for Frigate 0.18 focuses on critical security updates to address remote code execution vulnerabilities. The update fixes exploits related to go2rtc, websocket paths, and media authentication checks. Docker images are available for various architectures.
Key Highlights
- Critical security fixes addressing Remote Code Execution (RCE) vulnerabilities as root.
- Fixes source scheme bypasses in go2rtc exec-filter.
- Fixes direct websocket path vulnerabilities.
- Normalizes request paths in media authentication checks.
- Provides Docker images for standard, TensorRT, RK, ROCm, and Synaptics architectures.
Full Release Notes
This is a maintenance release for Frigate 0.18 that includes some security fixes. ## Images - [ghcr.io/blakeblackshear/frigate:0.18.2](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391143005?tag=0.18.2) - [ghcr.io/blakeblackshear/frigate:0.18.2-standard-arm64](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391102931?tag=0.18.2-standard-arm64) - [ghcr.io/blakeblackshear/frigate:0.18.2-tensorrt](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391215249?tag=0.18.2-tensorrt) - [ghcr.io/blakeblackshear/frigate:0.18.2-rk](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391162041?tag=0.18.2-rk) - [ghcr.io/blakeblackshear/frigate:0.18.2-rocm](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391271833?tag=0.18.2-rocm) - [ghcr.io/blakeblackshear/frigate:0.18.2-tensorrt-jp6](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391116063?tag=0.18.2-tensorrt-jp6) - [ghcr.io/blakeblackshear/frigate:0.18.2-synaptics](https://github.com/blakeblackshear/frigate/pkgs/container/frigate/1391150122?tag=0.18.2-synaptics) ## What's Changed ### Security Fixes * [source scheme bypasses go2rtc exec-filter in Frigate allowing admin-authenticated RCE as root (GHSA-qjjw-3v66-279f)](https://github.com/blakeblackshear/frigate/security/advisories/GHSA-qjjw-3v66-279f) * [direct websocket paths allows viewers to perform RCE as root (GHSA-93xj-hg88-ffg7)](https://github.com/blakeblackshear/frigate/security/advisories/GHSA-93xj-hg88-ffg7) * [the /auth media and stream checks classify the raw request path, not the one nginx serves (GHSA-3cxh-fj2f-h497)](https://github.com/blakeblackshear/frigate/security/advisories/GHSA-3cxh-fj2f-h497) ## What's Changed * Security patches by @blakeblackshear in https://github.com/blakeblackshear/frigate/pull/24658 * Normalize request paths in media auth by @hawkeye217 in https://github.com/blakeblackshear/frigate/pull/24662 **Full Changelog**: https://github.com/blakeblackshear/frigate/compare/v0.18.1...v0.18.2
Related Repositories
public-apis/public-apis★ 491,196
A collective list of free APIs
NousResearch/hermes-agent★ 256,060
The agent that grows with you
yt-dlp/yt-dlp★ 200,237
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,550
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.