Security status
Recent public vulnerabilities that affect StartOS, StartTunnel, StartWRT or Marketplace services, and the status of each.
The best protection is to keep StartOS and your installed services up to date. Each entry below says what, if anything, you need to do.
Last updated November 5, 2026. To report a vulnerability, see Security or email security@start9.com
| Vulnerability | Severity | StartOS | StartTunnel | StartWRT | Marketplace services |
|---|---|---|---|---|---|
| Pillow: flaws in Python image handling | Critical | Not affected | Not affected | Not affected | 8 fixed 8 pending |
| Linux kernel network connection flaw | High | In progress | Not affected | Fixed in 1.3.0 | Not affected |
| Node.js security release (October 2026) | High | Fixed in 0.4.1 | Not affected | Not affected | 53 fixed 8 pending |
| Linux kernel flaws disclosed before fixes | High | Monitoring | Not affected | Monitoring | Not affected |
| Compromised eMudhra certificate authorities | Critical | Fixed in 0.4.0.3 | Fixed in 1.4.0 | Fixed in 1.3.0 | 104 fixed 14 pending |
| Ruby pattern-matching flaws | High | Not affected | Not affected | Not affected | 2 fixed |
| PHP2Shell: critical flaws in PHP | Critical | Not affected | Not affected | Not affected | 3 fixed |
| nginx security release (October 2026) | Medium | Not affected | Not affected | Not affected | 5 fixed |
| Core Lightning security fixes | High | Not affected | Not affected | Not affected | 1 fixed |
| SSHhole: SSH password login bypass | Critical | Not affected | Not affected | Not affected | Not affected |
| OpenSSH flaws | Medium | Not affected | Not affected | Not affected | Not assessed |
| Plex2Shell: critical flaws in Plex Media Server | Critical | Not affected | Not affected | Not affected | Not affected |
| Status | Meaning |
|---|---|
| In progress | A fix is on its way, from Start9 or from the app's developers. |
| Monitoring | No fix exists yet anywhere. We will ship one as soon as it does. |
| Fixed | A fixed version is available. Update to it. |
| Not affected | The vulnerability does not apply. |
Pillow: flaws in Python image handling
Critical severity · Disclosed October 19, 2026 · In progress
Specially crafted image files could let an attacker run code in Python apps that open them with the Pillow image library.
What to do: Update BOLT12 Pay, Cloud Print Bridge, Frappe Helpdesk, Hermes Agent, Open WebUI, Paperless-ngx, RomM and vLLM. Until the others are fixed, avoid uploading or importing images and documents you don't trust into them.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use Pillow. |
| StartTunnel | Not affected | Doesn't use Pillow. |
| StartWRT | Not affected | Doesn't use Pillow. |
Marketplace services · 8 fixed · 8 pending
Fixed services show the version that contains the fix.
- copyparty In progress
- Crawl4AI In progress
- ERPNext In progress
- Home Assistant In progress
- Immich In progress
- LNbits In progress
- Robosats In progress
- Stirling PDF In progress
- BOLT12 Pay 0.3.15:0
- Cloud Print Bridge 0.6.0:3
- Frappe Helpdesk 16.0.0:0
- Hermes Agent 2026.10.23:0
- Open WebUI 0.12.4:0
- Paperless-ngx 3.3.4:0
- RomM 5.4.1:0
- vLLM 0.32.0:1
Checked and not affected: Synapse.
Linux kernel network connection flaw
High severity · Disclosed October 15, 2026 · In progress
A flaw in how the Linux kernel sets up new network connections could let an attacker take full control of a device, without any password or interaction. The attack needs unusual IPv4 traffic that network equipment commonly blocks, reducing exposure over many internet connections. Filtering varies by network, so this is not a guarantee of protection: an attacker whose traffic reaches the device may still be able to use it, locally or remotely. Researchers have shown a working attack in a specific server configuration. No attacks have been reported in the wild.
What to do: Update StartOS to 0.4.1 or later and StartWRT to 1.3.0 or later. Until a StartOS update fixes Raspberry Pi, limit direct network access to a Raspberry Pi server's services to trusted devices, and keep untrusted devices off its local network.
| Platform | Status | Details |
|---|---|---|
| StartOS | In progress | Fixed in StartOS 0.4.1 on every device except Raspberry Pi. On a Raspberry Pi, an attacker who can connect directly to your server's services over IPv4 may be able to use it. The Raspberry Pi fix is coming in a later StartOS update. |
| StartTunnel | Not affected | Uses your VPS's own operating system, which may be vulnerable to this remote attack. Install your provider's kernel update and restart the VPS. |
| StartWRT | Fixed in 1.3.0 |
Marketplace services: They use your server's Linux kernel rather than their own. Follow the StartOS guidance above.
Node.js security release (October 2026)
High severity · Disclosed October 21, 2026 · Monitoring
A flaw in how Node.js unpacks compressed (Brotli) data could let a malicious website run code inside an app that downloads from it. Many services are built on Node.js.
What to do: Update StartOS to 0.4.1 or later, and update the services marked fixed. Fixes for the services marked in progress are on the way, and those marked monitoring will be updated once a fixed release of them is available. Until then, avoid pointing services that download web content, such as Crawl4AI, at sites or feeds you don't trust.
| Platform | Status | Details |
|---|---|---|
| StartOS | Fixed in 0.4.1 | |
| StartTunnel | Not affected | Doesn't use Node.js. |
| StartWRT | Not affected | Doesn't use Node.js. |
Marketplace services · 53 fixed · 8 pending
Fixed services show the version that contains the fix.
- Byparr Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Cal.diy Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Crawl4AI Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Holesail Monitoring (It will be updated when a release with the fixed Node.js is available.)
- LNbits Monitoring (It will be updated when a release with the fixed Node.js is available.)
- ONLYOFFICE Docs Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Open WebUI Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Standard Notes Server Monitoring (It will be updated when a release with the fixed Node.js is available.)
- Actual Budget 26.10.0:3
- Am I Exposed? 0.43.2:2
- ArchiveBox 0.9.73:2
- ASICSeer 1.5.4:27
- Audiobookshelf 2.37.2:0
- Balance of Satoshis 25.0.0:2
- Bark Wallet 0.9.0:6
- BCH Explorer 3.14.6:0
- Bitcoin Explorer 3.5.1:16
- Bitcoin Family Dashboard 0.2.2:5
- Blisspoint 0.6.3:0
- BTCPay Server 2.4.5:4
- Bunker46 0.1.0:7
- Canary Wallet 1.7.1:0
- ChangeDetection.io 0.60.9:1
- Core Lightning 26.6.9:6
- Cronicle 0.9.135:4
- CryptPad 2026.10.0:0
- DeepSeek Harness 0.2.0-rc.2:1
- Dojo 1.29.2:6
- EloPool 1.3.0:0
- ERPNext 16.52.1:0
- Frappe Helpdesk 1.31.0:3
- Ghost 6.72.0:1
- God's Eye View 0.2.1:2
- Hashrate Autopilot 1.18.2:3
- Hermes Agent 2026.10.23:0
- Immich 3.3.5:0
- Kindle Bitcoin Display 1.1.1:3
- LaWallet NWC 2.9.0:0
- Lightning Jet 1.7.0:0
- Linkwarden 2.16.3:0
- Mempool 3.3.2:0
- Minecraft Server 26.2:11
- Multi-Scrobbler 0.20.2:0
- n8n 2.44.6:0
- NextExplorer 3.1.0:3
- Node-RED 5.0.9:0
- OpenClaw 2026.9.4:3
- OpenSERP 0.8.12:2
- Pact 0.20.2:0
- Papra 26.7.1:0
- PPQ Private Mode 0.4.1:2
- Public Pool 0.2.5:25
- Readstr 0.1.0:7
- Ride The Lightning 0.15.15:0
- RomM 5.4.1:1
- Scriptwerk 0.1.73:1
- Spliit 1.30.0:2
- Stash 1.0.1:6
- ThunderHub 0.19.1:0
- Umbrel Bitcoin UI 1.1.0:16
- Uptime Kuma 2.5.7:0
Checked and not affected: Jitsi Meet.
Linux kernel flaws disclosed before fixes
High severity · Disclosed October 21, 2026 · Monitoring
Reports of several unfixed Linux kernel flaws were accidentally posted publicly. Two affect the kernel's built-in Windows file-sharing (SMB) server, one lets a program already running on a device take full control of it, and one affects only VMware virtual machines. Fixes have not been released yet.
What to do: Nothing to do right now. Install only services you trust, and update StartOS and StartWRT when fixes arrive.
| Platform | Status | Details |
|---|---|---|
| StartOS | Monitoring | Only the take-full-control flaw applies, and it needs a program already running on your server. StartOS doesn't run the SMB server. The fix will come in a StartOS update once it's released. |
| StartTunnel | Not affected | Uses your VPS's own operating system. Install your provider's updates when they're released. |
| StartWRT | Monitoring | Only the take-full-control flaw applies. StartWRT doesn't run the SMB server. The fix will come in a StartWRT update once it's released. |
Marketplace services: They use your server's Linux kernel rather than their own. Follow the StartOS guidance above.
Compromised eMudhra certificate authorities
Critical severity · Disclosed October 20, 2026 · Monitoring
Certificates issued through a compromised certificate authority (eMudhra) could let an attacker impersonate any website to software that still trusts it. Updated software no longer trusts that authority.
What to do: Update StartOS to 0.4.0.3 or later, StartTunnel to 1.4.0 or later, and the services marked fixed. Fixes for the services marked in progress are on the way, and those marked monitoring will be updated once a fixed release of them is available. Update StartWRT when its next release arrives.
| Platform | Status | Details |
|---|---|---|
| StartOS | Fixed in 0.4.0.3 | |
| StartTunnel | Fixed in 1.4.0 | |
| StartWRT | Fixed in 1.3.0 |
Marketplace services · 104 fixed · 14 pending
Fixed services show the version that contains the fix.
- Alby Hub Monitoring (Only the experimental Bark wallet backend is affected. It will be updated when a fixed release is available.)
- ArchiveBox Monitoring (Its built-in browser, used for screenshots, PDFs and page snapshots, still trusts the compromised authority. It will be updated when a fixed release is available.)
- Byparr Monitoring (Its built-in browser still trusts the compromised authority. It will be updated when a fixed release is available.)
- Crawl4AI Monitoring (Its built-in browser, used for crawling, still trusts the compromised authority. It will be updated when a fixed release is available.)
- Fedimint Gateway Monitoring (It will be updated when a fixed release is available.)
- Fedimint Guardian Monitoring (It will be updated when a fixed release is available.)
- Hermes Agent Monitoring (Its built-in browser tool still trusts the compromised authority. It will be updated when a fixed release is available.)
- Linkwarden Monitoring (Its built-in browser, used to archive saved pages, still trusts the compromised authority. It will be updated when a fixed release is available.)
- Maple Proxy Monitoring (It will be updated when a fixed release is available.)
- MeTube Monitoring (Its YouTube helper still trusts the compromised authority. It will be updated when a fixed release is available.)
- Mostro Monitoring (It will be updated when a fixed release is available.)
- Nostr VPN Monitoring (It will be updated when a fixed release is available.)
- ONLYOFFICE Docs Monitoring (It will be updated when a fixed release is available.)
- Open WebUI Monitoring (Installing the requirements of an added tool or function still trusts the compromised authority. It will be updated when a fixed release is available.)
- Actual Budget 26.10.0:3
- Am I Exposed? 0.43.2:1
- Audiobookshelf 2.37.1:2
- AxeOS Monitor 1.0.0:8
- AzerothCore 16.0.0:7 (The Playerbots version is fixed in its 16.0.0:8 release.)
- Balance of Satoshis 25.0.0:2
- Bark Wallet 0.10.0:0
- BCH Explorer 3.12.0:6
- Beszel 0.20.0:2
- Bisq 2 Node 2.1.14.0:1
- Bitcoin Core 31.1:26
- Bitcoin Explorer 3.5.1:16
- Bitcoin Family Dashboard 0.2.2:5
- BOLT12 Pay 0.3.15:0
- BTCPay Server 2.4.5:3
- Bunker46 0.1.0:7
- Buzz Relay 0.2.1:3
- Cal.diy 6.2.0:11
- Canary Wallet 1.7.1:0
- Chama 6.4.30:0
- ChangeDetection.io 0.60.9:0
- Cloudflare Tunnel 2026.10.3:1
- Core Lightning 26.6.10:0
- Cronicle 0.9.135:4
- CryptPad 2026.10.0:0
- DeepSeek Harness 0.2.0-rc.2:1
- Discourse 2026.10.0-latest.1:1
- DocuSeal 3.3.3:1
- Eclair 0.14.5:1
- Element Web 1.12.27.3:2
- ERPNext 16.52.1:0
- Firefly III 6.7.9:2
- Forgejo 16.0.6:1
- Forgejo Runner 13.2.0:6
- Frappe Helpdesk 1.31.0:3
- Ghost 6.72.0:1
- Gitea 28.2.0:1
- Gitea Runner 5.2.2:1
- God's Eye View 0.2.1:2
- Hashrate Autopilot 1.18.2:2
- Helipad 0.2.2:10
- Home Assistant 2026.10.3:0
- Immich 3.3.5:0
- Inbucket 3.2.0:0
- IPFS 0.42.0:6
- Isso 0.14.0:6
- Jellyfin 12.2:1
- Keep 0.12.2:0
- Kimai 2.70.1:1
- Kindle Bitcoin Display 1.1.1:3
- LaWallet NWC 2.9.0:0
- Lightning Jet 1.7.0:0
- Lightning Terminal 0.17.8:0
- llama.cpp 11669:1
- LNbits 1.6.2:4
- LND 0.21.4-beta:6
- LNDg 1.11.1:3
- Maloja 3.2.9:1
- Manifold Fedimint Guardian 0.1.8:1
- Mattermost 12.0.1:0
- Memos 0.31.0:2
- Mempool 3.3.2:0
- Minecraft Server 26.2:11
- Miniflux 2.3.4:0
- Monero 0.18.5.4:0
- Multi-Scrobbler 0.20.2:0
- n8n 2.43.7:1
- Navidrome 0.64.2:2
- Nextcloud 35.0.2:1
- Node-RED 5.0.9:0
- Nostr RS Relay 0.10.0:7
- NTFY 2.32.0:1
- Ollama 0.40.8:0
- OpenClaw 2026.9.4:3
- OpenSERP 0.8.14:0
- Pact 0.18.0:5
- Paperless-ngx 3.3.0:1
- Papra 26.7.0:4
- phoenixd 0.9.2:2
- PPQ Private Mode 0.4.1:2
- Public Pool 0.2.5:25
- qBittorrent 5.3.0:0
- Quai Network 0.56.1:0
- Readstr 0.1.0:7
- Ride The Lightning 0.15.15:0
- RomM 5.3.1:2
- s/watcher 0.1.2:3
- SearXNG 2026.10.15:1
- Snowflake 2.15.2:1
- Specter 2.1.11:2
- Stalwart 0.16.27:1
- StartOS Registry 1.2.0:0
- Stash 1.0.1:5
- Stirling PDF 2.14.3:6
- Synapse 1.163.0:3
- Tailscale 1.104.2:0
- ThunderHub 0.19.1:0
- TunnelSats 1.0.0:2
- Uptime Kuma 2.5.6:1
- Vaultwarden 1.37.4:2
- Vikunja 2.7.1:0
- vLLM 0.32.0:1
- Wasabi Wallet 2.8.4:2
- Wisp 0.9.1:1
Checked and not affected: ASICSeer, Bisq, Bitcoin Cash Daemon, Bitcoin Cash Node (BCHN), BitcoinTX, Blisspoint, Blockstream Blind Oracle, Charge LND, Clams Remote, Cloud Print Bridge, Collabora Online, copyparty, Coturn, CouchDB, Datum Gateway, Dojo, Electrs, EloPool, File Browser (unsupported), FileBrowser Quantum, Flowee the Hub, Frigate Electrum Server, Fulcrum, Fulcrum BCH, Garage, Holesail, I2Pd, Jitsi Meet, Kamado Pool, Namecoin Core, NextExplorer, OwnTracks Recorder, P2Pool, Pocket ID, Primal, Prowlarr, Public Pool's Web, Quai Mining Dashboard, Radarr, Radicale, Reticulum MeshChat, Robosats, RustDesk Server, Scriptwerk, Signal Messenger Bridge, SimpleX Server, SimpleX Websocket Bridge, Sonarr, Spliit, Standard Notes Server, Start9 Pages, Stratum V2, Stratum V2 Pool, Tor, Tor Relay, Umbrel Bitcoin UI, UTXOracle, WireGuard VPN.
Ruby pattern-matching flaws
High severity · Disclosed October 23, 2026 · Fixed
Flaws in Ruby's pattern-matching (regular expression) engine could let an attacker run code in a Ruby app that accepts patterns from its users.
What to do: Update Discourse and DocuSeal.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use Ruby. |
| StartTunnel | Not affected | Doesn't use Ruby. |
| StartWRT | Not affected | Doesn't use Ruby. |
Marketplace services · 2 fixed
Fixed services show the version that contains the fix.
- Discourse 2026.10.0-latest.1:0
- DocuSeal 3.3.4:0
PHP2Shell: critical flaws in PHP
Critical severity · Disclosed October 21, 2026 · Fixed
Two flaws in PHP, the language many web apps are written in, let anyone who can reach a PHP app take control of it without logging in. A smaller follow-up PHP flaw disclosed on October 23 (CVE-2026-115560) affects only apps configured in an unusual way and does not affect any of these services.
What to do: Update Nextcloud, Firefly III and Kimai.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use PHP. |
| StartTunnel | Not affected | Doesn't use PHP. |
| StartWRT | Not affected | Doesn't use PHP. |
Marketplace services · 3 fixed
Fixed services show the version that contains the fix.
- Firefly III 6.7.9:2
- Kimai 2.70.1:1
- Nextcloud 35.0.2:1
nginx security release (October 2026)
Medium severity · Disclosed October 14, 2026 · Fixed
nginx, a widely used web server, fixed five flaws. Each one needs a specific setup to be exploited.
What to do: Update Start9 Pages, Bitcoin Family Dashboard and Maple Proxy.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use nginx. |
| StartTunnel | Not affected | Doesn't use nginx. |
| StartWRT | Not affected | Doesn't use nginx. |
Marketplace services · 5 fixed
Fixed services show the version that contains the fix.
- Bitcoin Family Dashboard 0.2.2:4
- Maple Proxy 0.3.2:0
- Minecraft Server 26.2:10
- Start9 Pages 1.1.0:0
- Synapse 1.163.0:3
Checked and not affected: ASICSeer, Bark Wallet, Chama, Clams Remote, EloPool, Primal, Public Pool, Standard Notes Server.
Core Lightning security fixes
High severity · Disclosed October 2, 2026 · Fixed
Core Lightning 26.06.8 fixes several security problems, including one that could put channel funds at risk. Attackers have been probing nodes that run older versions. Core Lightning 26.06.10, released November 4, fixes more problems in opening and splicing channels, settling payments and remote access to the node.
What to do: Update Core Lightning.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use Core Lightning. |
| StartTunnel | Not affected | Doesn't use Core Lightning. |
| StartWRT | Not affected | Doesn't use Core Lightning. |
Marketplace services · 1 fixed
Fixed services show the version that contains the fix.
- Core Lightning 26.6.10:0
SSHhole: SSH password login bypass
Critical severity · Disclosed November 5, 2026 · Not affected
SSHhole can let an attacker log in without the correct password on certain Linux systems with SSH password logins enabled.
What to do: No action is needed for StartOS, StartWRT or Marketplace services. For StartTunnel, install your VPS provider's updates.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | StartOS uses Debian's SSH server, which is not affected. |
| StartTunnel | Not affected | Uses your VPS's own SSH server. Install your provider's updates. |
| StartWRT | Not affected | Uses a different SSH server (Dropbear). |
Marketplace services: Not affected.
OpenSSH flaws
Medium severity · Disclosed October 20, 2026 · Not affected
Three OpenSSH flaws affect specific SSH server setups: custom file-transfer (SFTP) restrictions, and Kerberos or Active Directory sign-in.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use the affected setups. |
| StartTunnel | Not affected | Uses your VPS's own SSH server. Install your provider's updates. |
| StartWRT | Not affected | Uses a different SSH server (Dropbear). |
Marketplace services have not been assessed for this advisory.
Plex2Shell: critical flaws in Plex Media Server
Critical severity · Disclosed October 16, 2026 · Not affected
A chain of Plex Media Server flaws lets an attacker take control of a server without logging in, and it is being actively exploited.
| Platform | Status | Details |
|---|---|---|
| StartOS | Not affected | Doesn't use Plex. |
| StartTunnel | Not affected | Doesn't use Plex. |
| StartWRT | Not affected | Doesn't use Plex. |
Marketplace services: Plex isn't offered in the Marketplace.