CVE-2020-37039CWE-770

Frigate 2.02 - Denial Of Service

Medium · published January 30, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

⚠️ A single oversized input is all it takes to crash Frigate 2.02! Imagine pasting a payload of 8000 characters into the command line and watching the app go down like a house of cards. 😱 Think of it like a restaurant that can't handle a massive order at once. If too many ingredients are thrown at the kitchen at the same time, they can't keep up and the whole operation grinds to a halt! If an attacker exploits this vulnerability, they could send a barrage of oversized inputs, causing the application to crash and resulting in unsatisfied users and downtime. This denial of service attack can disrupt normal operations, particularly if Frigate is a critical component of your system.

Put simply

Think of it like a restaurant that can't handle a massive order at once. If too many ingredients are thrown at the kitchen at the same time, they can't keep up and the whole operation grinds to a halt! This denial of service vulnerability allows attackers to crash Frigate by sending oversized inputs to the command line interface. Essentially, it overflows the application's ability to handle the input, leading to a crash.

What to do

If an attacker exploits this vulnerability, they could send a barrage of oversized inputs, causing the application to crash and resulting in unsatisfied users and downtime. This denial of service attack can disrupt normal operations, particularly if Frigate is a critical component of your system. To mitigate this vulnerability, update Frigate to the latest version that addresses this issue, and implement input size checks to limit the size of command line inputs. Regularly audit your input handling to ensure it can withstand unexpected payloads. You've got this! By taking action now, you'll not only protect your systems but also strengthen your security posture. 🛡️

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00406 · 33.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-30T22:07Z
EPSS history
Timeline
  • 30 JAN 22:07Z
    Frigate 2.02 - Denial Of Service
    cvelistv5