Someone Was Mining Crypto on My Home Server
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A self-hosted analytics user found an unauthorized XMRig cryptominer running inside their Plausible container, with its executable deleted and its process disguised. The author traces the likely entry point to an unauthenticated remote-code-execution flaw (CVE-2026-8467) affecting Plausible Community Edition versions 3.0 through 3.2.0.