ruTorrent vulnerabilities

CVEs whose affected-version data names the ruTorrent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121546Medium· 5.9

5d ago

ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following

ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape the topDirectory jail because correctDirectory() does not resolve symbolic links. Attackers can submit a data…

▾ SunlitNovik · ruTorrentEPSS 0.40%via CVEORG