CVE-2025-69194

HIGH 8.8

Wget2: arbitrary file write via metalink path traversal in gnu wget2

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

CWE	CWE-22
Published	Jan 9, 2026
Last Updated	Feb 26, 2026

Stay Ahead of the Next One

Get instant alerts for

Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

NVD ↗ CVE.org ↗ EPSS Data ↗

access.redhat.com: https://access.redhat.com/security/cve/CVE-2025-69194 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2425773

Credits

Red Hat would like to thank Arkadi Vainbrand for reporting this issue.