That's really the key point here: Trusting the people you share the server with.
Jellyfin is kind of binary in that regard. Once you're authenticated - no matter the privileges - you can reach a lot of places.
I've written about this recently, if anyone's interested.
Like others have mentioned, you should probably only expose the server to a trusted group of users (ideally not directly on the Internet).
Jellyfin is kind of binary in that regard. Once you're authenticated - no matter the privileges - you can reach a lot of places. I've written about this recently, if anyone's interested.
Like others have mentioned, you should probably only expose the server to a trusted group of users (ideally not directly on the Internet).