Frigate NVR Updates: Security Hardening Sweep
Most merged work is a coordinated security hardening push across authentication, browser origins, secrets, and container startup, plus motion-search limits for stability. Open proposals on retention, stream config, and detector offload point to what's next.
Duration: PT2M26S
Episode overview
This episode is a short developer briefing from Frigate NVR Updates.
It explains recent repository work in plain language.
- Show: Frigate NVR Updates
- Published: 2026-10-20T13:33:09Z
- Audio duration: PT2M26S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's October 20th, 2026, and this is Frigate NVR Updates.
The dominant pattern is a coordinated security and hardening push, accounting for most of the merged work.
First, authentication and browser trust. Change 24714 now rejects cross-origin websocket handshakes, closing a path where any site visited by a local user could open the internal command channel and pull streams. Backing that, change 24713 stops trusting the role claim in login tokens and instead authorizes from the…
Second, secret handling and container boundaries. Change 24719 expands credential masking across the config, stream and metrics endpoints to cover email-style usernames, password-only logins and credential query parameters, and tightens config saves so masked values cannot overwrite real secrets. Alongside it,…
Finally, resource protection and small reliability fixes. Change 24717 caps motion search to one active job per user and three globally, with automatic eviction, preventing unbounded decode load. Change 24727 disables file caching for review thumbnails that are rewritten in place. Frigate Plus documentation was also…
What's next: three open proposals on recording retention overlap,…
Nearby episodes from Frigate NVR Updates
- Weekly Recap - Security Hardening and Stability Fixes
- Security Hardening Wave and Stability Fixes
- Startup Controls and Event Cleanup
- Recording Query Speedups and Reliability Tweaks
- Watchdog Memory Fix and Config Stability
- Go2RTC Security Lockdown and Stability Fixes
- Idle CPU Cuts and Security Patches
- Frame Memory and Startup Fixes