CVE-2025-54310 | THREATINT

Description

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.

Reserved 2025-07-18 | Published 2025-07-18 | Updated 2025-07-18 | Assigner mitre

MEDIUM: 4.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Problem types

CWE-669 Incorrect Resource Transfer Between Spheres

Product status

Default status

unaffected

Any version before 5.1.2

affected

References

www.qbittorrent.org/news

github.com/...ommit/6ad073e0bc26c1f9d3530490ece611b49f5bfcab

github.com/...ommit/ad68813fe879ba245a4f41f105ed8d2114a92971

cve.org (CVE-2025-54310)

nvd.nist.gov (CVE-2025-54310)

Download JSON