CVE-2026-25579 | Navidrome up to 0.59.x /rest/getCoverArt size resource consumption (GHSA-hrr4-3wgr-68×3)

A vulnerability identified as problematic has been detected in Navidrome up to 0.59.x. Affected is an unknown function of the file /rest/getCoverArt. Performing a manipulation of the argument size results in resource consumption.

This vulnerability is cataloged as CVE-2026-25579. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.