From 9a0ac6ee70b08c1b81f47d47ee2d2c7c5cd853e5 Mon Sep 17 00:00:00 2001
From: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>
Date: Tue, 31 Mar 2026 12:54:19 -0500
Subject: [PATCH] enforce camera access in chat start_camera_watch tool

The start_camera_watch tool called via POST /chat/completion did not
validate camera access, allowing a restricted viewer to start VLM
monitoring on cameras outside their allowed set through the chat
interface.
---
 frigate/api/chat.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/frigate/api/chat.py b/frigate/api/chat.py
index c3ee7a77e3..82b2c92eb8 100644
--- a/frigate/api/chat.py
+++ b/frigate/api/chat.py
@@ -673,6 +673,8 @@ async def _execute_start_camera_watch(
     if camera not in config.cameras:
         return {"error": f"Camera '{camera}' not found."}
 
+    await require_camera_access(camera, request=request)
+
     genai_manager = request.app.genai_manager
     vision_client = genai_manager.vision_client or genai_manager.tool_client
     if vision_client is None: