Jellyfin Ffprobe Exploit

Ibrahim Saud@tektrix

•updated Jun 22, 2026•1•0•9

Detects Jellyfin's automated ffprobe media scan pipeline spawning suspicious network-related shell commands. This indicates active exploitation of the PixelSmash vulnerability (CVE-2026-8461) via zero-click library scans.