Music Assistant closes a route that could read music or image files anywhere its server process could reach. The built-in source previously accepted a local file path where it expected a track, radio stream or image link, bypassing the administrator-only setup for local music folders.
Marcel van der Veldt restricts that source to remote URLs. Local files remain available through a filesystem music source set up and shared by an administrator.