CVE-2021-44255: Motioneye Project Motioneye

High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days.

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.

Affected products

• Motioneye Project Motioneye: before 0.42.1 (fixed in 0.42.1)
• Motioneyeos Project Motioneyeos: before 20200606 (fixed in 20200606)

Published 2022-01-31. Last modified 2026-06-17.