CVE-2017-5982: Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbi...

Security readout for executives and security teams

CVE-2017-5982 is an arbitrary file read issue in the Chorus2 2.4.2 add-on for Kodi. If the affected add-on is remotely reachable, an attacker could request files outside the intended image path and read local files from the host. Exposure is most likely on Kodi installations running the Chorus2 2.4.2 add-on with its web functionality reachable from untrusted networks. Internet-exposed media systems or shared internal environments carry higher risk. Treat this as a targeted exposure issue, not a broad enterprise emergency. Prioritize internet-facing or shared Kodi systems first, because arbitrary file reads can expose credentials, configuration, or private media-host data. Mitigation focus: Inventory Kodi systems for the Chorus2 2.4.2 add-on.; Disable or remove Chorus2 where remote access is unnecessary.; Restrict Kodi web access to trusted networks only..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.