Emby Server is a user-installable home media server.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Dec 9, 2025 · NIST NVD

   Detected

   Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration, not at the OS level). Other than network access, no specific preconditions need to be fulfilled for a server to be vulnerable. This issue is fixed in version 4.9.1.81.

2. Oct 14, 2026 · NIST NVD

   Updated

   Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration, not at the OS level). Other than network access, no specific preconditions need to be fulfilled for a server to be vulnerable. This issue is fixed in version 4.9.1.81.

Affected

• cpe emby/embyversion unspecified
• cpe emby/emby4.9.2.6

Sources

• CVE.orgVulnerability recordCVE-2025-64113

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-64113

  30-day exploitation probability 0.6%

  first.org
• NIST NVDVulnerability recordCVE-2025-64113

  Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration, not at the OS level). Other than network access, no specific preconditions need to be fulfilled for

  nvd.nist.gov

References

• Mitigation · github.com