For those of you who are running or thinking about installing Huntarr, you may want to think twice.

There have been recent security concerns raised around Huntarr, and a lot of the project appears to have been removed from public view instead of clearly addressed. I’m not telling anyone what to do, but I do think anyone still running it should review the information and decide for themselves whether they want to keep it online.

Side note: it looks like Huntarr has already been deprecated in the Unraid Apps menu. This post is mainly a heads-up for people who already installed it.

Info / discussion:

• Reddit: https://www.reddit.com/r/selfhosted/comments/1rckopd/huntarr_your_passwords_and_your_entire_arr_stacks/

• YouTube short (and quite good) overview: https://www.youtube.com/shorts/j4Ci1gqHyT4
  

If you’re still running it and it’s exposed to the internet, you may want to disable external access immediately. If you insist on continuing to run it, at minimum review your setup and rotate any related keys/tokens just to be safe.

Edited February 24Feb 24 by TrevP

Thanks, I just came across this — I didn’t realize, since I randomly found this post.

Wow...l a while ago they overhauled the UI and was talking about how awesome the software is.... next thing you know it's off the face of the earth! Shocking