spupuz/VibeNVR

v1.30.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Media Servers

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ffmpeg lightweight local-storage nvr opensource privacy

+1 more

video-surveillance

Affected surfaces

rbac

Summary

AI summary

Updates 🛠️ Key Improvements, 🚀 Release v1.30.0, and RBAC across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Enforces stricter endpoint validation to restrict viewer access to authorized cameras only. Enforces stricter endpoint validation to restrict viewer access to authorized cameras only. Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Medium	Adds granular Role-Based Access Control (RBAC) for Viewer accounts. Adds granular Role-Based Access Control (RBAC) for Viewer accounts. Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Low	Redesigns User Settings modal with modern sticky layout and responsive controls. Redesigns User Settings modal with modern sticky layout and responsive controls. Source: llm_adapter@2026-06-09 Confidence: high	—

Full changelog

Full Changelog: https://github.com/spupuz/VibeNVR/compare/v1.29.8...v1.30.0

🚀 Release v1.30.0

📝 Summary

VibeNVR v1.30.0 is a milestone release that introduces our highly anticipated Granular Role-Based Access Control (RBAC). System administrators now have the precision to fine-tune Viewer accounts, explicitly granting or revoking the ability to view live feeds, replay historical events, or control PTZ cameras on a per-user and per-camera basis. This release also includes a beautiful redesign of the User Settings interface to support these powerful new capabilities intuitively.

🛠️ Key Improvements

🚀 Granular RBAC: Viewers can now be assigned specific VIEW, REPLAY, and CONTROL permissions via a flexible camera_accesses model.
🛡️ Security: Stricter endpoint validation ensures viewers can only access streams, frames, and events for cameras they are explicitly authorized for, strengthening the core security posture.
🎨 Aesthetics: The User Settings modal has been completely redesigned with a modern sticky layout, intuitive toggles, and responsive checkboxes tailored for mobile and desktop experiences.