Frigate NVR Updates: Weekly Recap - Runtime Flexibility & Security Hardening
This week's Frigate work centered on removing restart requirements for GenAI configuration and closing a path traversal gap in admin endpoints, alongside a batch of UI and notification reliability fixes ahead of the 0.18 beta. One pull request and nine additional commits landed, spanning runtime config, security, and polish.
Duration: PT2M50S
Episode overview
This episode is a short developer briefing from Frigate NVR Updates.
It explains recent repository work in plain language.
- Show: Frigate NVR Updates
- Published: 2026-08-17T16:05:48Z
- Audio duration: PT2M50S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Welcome to Frigate NVR Updates, covering August 10th through August 17th, 2026. One pull request activity item and nine additional commits this week.
The standout theme is runtime flexibility. PR 23964, and its matching commit from Josh Hawkins, removes the need to restart Frigate just to enable GenAI object descriptions. Post-processors now get created when a camera turns on GenAI at runtime. Paired with that, commit 8425a76 rebuilds notification camera access…
Second theme: security hardening. Commit 11f8786 addresses a serious gap where user-supplied path components — face names, classification categories, image IDs, trigger data — could escape their base directory. The worst case allowed a delete request to wipe out media and config directories entirely, though it's…
Third theme: notification and review reliability. Commit 812e530 fixes a bug where the notification suspend state was lost on page reload, caused by a type mismatch between string and numeric values arriving over different connections. Commit fd98977 changes how manual events are categorized, so ones tagged with…
Rounding out the week, commit c75611b delivers a batch of multi-export UI fixes with new test coverage,…
Ne…