Someone on Torrent Sites Kept Fucking with My Sonarr

A developer recently shared a frustrating experience involving their Sonarr setup, a popular tool for managing TV show downloads. The author discovered that an unknown actor on public torrent sites was manipulating metadata and file structures in a way that caused their automated media server to ingest incorrect or malicious content. This incident highlights a significant security vulnerability in how automated media management software trusts external data sources. By poisoning the torrent indexer's metadata, the attacker was able to disrupt the user's local automation workflow. The author details the technical steps taken to identify the source of the interference and the subsequent measures implemented to harden their system against such attacks. This case serves as a cautionary tale for users of automated home media servers, emphasizing the importance of verifying data sources and implementing stricter filtering to prevent unauthorized manipulation of local automation pipelines.