# Latest livekit-server image is having some critical vulnerabilities

**URL:** <https://community.livekit.io/t/latest-livekit-server-image-is-having-some-critical-vulnerabilities/643>\
**Category:** Getting Started\
**Tags:** livekit-cloud\
**Created:** [March 23, 2026, 5:53am UTC](https://community.livekit.io/t/latest-livekit-server-image-is-having-some-critical-vulnerabilities/643 "2026-03-23T05:53:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ABHIJEET\_MALI](https://sea1.discourse-cdn.com/flex001/user_avatar/community.livekit.io/abhijeet_mali/32/583_2.png) [@ABHIJEET\_MALI](https://community.livekit.io/u/ABHIJEET_MALI)\
**Post date:** [March 23, 2026, 5:53am UTC](https://community.livekit.io/t/latest-livekit-server-image-is-having-some-critical-vulnerabilities/643/1 "2026-03-23T05:53:20Z")

</div>

Hi Team,

We observed that the latest livekit-server image with ‘latest’ tag [Image Layer Details - livekit/livekit-server:latest](https://hub.docker.com/layers/livekit/livekit-server/latest/images/sha256-051ac3adcce0f4901e03269f97eb5f3423154456215a5c2927754c1450a6134c) is having below critical vulnerabilities. Can you please here to get latest image with fix for these vulnerabilities.

| Severity | CVE | Fix status | Packages type | Vendor | Installed version | Package Name | Fixed version |
| --- | --- | --- | --- | --- | --- | --- | --- |
| High | CVE-2026-24051 | FixAvailable | Language | [go.opentelemetry.io/otel/sdk](http://go.opentelemetry.io/otel/sdk) | 1.39.0 | [go.opentelemetry.io/otel/sdk](http://go.opentelemetry.io/otel/sdk) | 1.40.0 |
| Critical | CVE-2026-33186 | FixAvailable | Language | [grpc package - google.golang.org/grpc - Go Packages](http://google.golang.org/grpc) | 1.78.0 | [grpc package - google.golang.org/grpc - Go Packages](http://google.golang.org/grpc) | 1.79.3 |

---

<div class="post-metadata">

**Author:** ![darryncampbell](https://sea1.discourse-cdn.com/flex001/user_avatar/community.livekit.io/darryncampbell/32/20_2.png) [@darryncampbell](https://community.livekit.io/u/darryncampbell)\
**Post date:** [March 23, 2026, 10:25am UTC](https://community.livekit.io/t/latest-livekit-server-image-is-having-some-critical-vulnerabilities/643/2 "2026-03-23T10:25:11Z")

</div>

Let me check with the team 👀

---

<div class="post-metadata">

**Author:** ![darryncampbell](https://sea1.discourse-cdn.com/flex001/user_avatar/community.livekit.io/darryncampbell/32/20_2.png) [@darryncampbell](https://community.livekit.io/u/darryncampbell)\
**Post date:** [March 23, 2026, 11:49pm UTC](https://community.livekit.io/t/latest-livekit-server-image-is-having-some-critical-vulnerabilities/643/3 "2026-03-23T23:49:33Z")

</div>

Hi, the ‘latest’ tag has been updated: [Image Layer Details - livekit/livekit-server:latest](https://hub.docker.com/layers/livekit/livekit-server/latest/images/sha256-051ac3adcce0f4901e03269f97eb5f3423154456215a5c2927754c1450a6134c)