CVE-2025-64113 - CVE House
Back to Database
Status published Critical CVE-2025-64113

Emby Server allows attackers to gain administrative server access without preconditions

Vulnerability Description

Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration, not at the OS level). Other than network access, no specific preconditions need to be fulfilled for a server to be vulnerable. This issue is fixed in version 4.9.1.81.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-64113

Credits & Attribution

No credits recorded in the NVD database.

References

More from EmbySupport

View All →
CVE-2025-64325
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
High 8.4
CVE-2023-33193
Emby Server Proxy Header Spoofing Vulnerability
Critical 9.1

Affected Vendor

EmbySupport

View all reports →

Affected Software

security
Vulnerable Versions:
< 4.9.1.81

Timeline

Official Publish: December 9th, 2025
Last Modified: December 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.