A vulnerability labeled as problematic has been found in owntone-server up to c4d57aa. Impacted is the function safe_atou64 of the file src/misc.c. Such manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2026-26829. The attack may be launched remotely. There is no exploit available.