---
id: CVE-2026-120320
title: >-
  jxxghp MoviePilot Workflow Fork Endpoint workflow.py
  WorkflowExecutor.restore_context deserialization
summary: >-
  A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This
  vulnerability affects the function WorkflowExecutor.restore_context of the
  file app/chain/workflow.py of the component Workflow Fork Endpoint. Executing
  a manipulation…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-502
  - CWE-20
vendor: jxxghp
product: MoviePilot
affected:
  - MoviePilot 3.1.0
  - MoviePilot 3.1.1
  - MoviePilot 3.1.2
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T19:16:13.414678Z'
exploitAvailable: true
published: '2026-11-02'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T19:16:41.393Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120320'
references:
  - url: 'https://vuldb.com/vuln/429653'
    label: >-
      VDB-429653 | jxxghp MoviePilot Workflow Fork Endpoint workflow.py
      WorkflowExecutor.restore_context deserialization
  - url: 'https://vuldb.com/vuln/429653/cti'
    label: 'VDB-429653 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-120320'
    label: CVE-2026-120320 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1015025'
    label: >-
      Submit #1015025 | jxxghp MoviePilot v3 branch (latest) code execution
      (deserialization)
  - url: >-
      https://github.com/0xGenesi/CVE/blob/main/MoviePilot_Workflow_Fork_Pickle_Deserialization_RCE.md
  - url: 'https://github.com/jxxghp/MoviePilot/pull/6930'
  - url: >-
      https://github.com/jxxghp/MoviePilot/commit/6034dcc880c13079aeb398dbe32c346ebcd3a6d2
  - url: 'https://github.com/jxxghp/MoviePilot/releases/tag/v3.1.3'
  - url: 'https://github.com/jxxghp/MoviePilot/'
tags:
  - cve.org
  - exploit-available
epss: 0.00389
epssPercentile: 0.33307
ingestedAt: '2026-11-05T19:30:42.617Z'
---

## Overview

A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecutor.restore_context of the file app/chain/workflow.py of the component Workflow Fork Endpoint. Executing a manipulation can lead to deserialization. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.1.3 is able to resolve this issue. This patch is called 6034dcc880c13079aeb398dbe32c346ebcd3a6d2. It is recommended to upgrade the affected component.

## Affected

- `MoviePilot 3.1.0`
- `MoviePilot 3.1.1`
- `MoviePilot 3.1.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.