CVE-2025-54310 — MEDIUM (4.0)

Q: What is CVE-2025-54310?

CVE-2025-54310 is a vulnerability with a CVSS score of 4.0 (MEDIUM). qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.

Q: How severe is CVE-2025-54310?

CVE-2025-54310 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-54310?

Check the references section above for vendor advisories and patch information. Affected products include: Qbittorrent Qbittorrent.

Vulnerability Description

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.

CVSS Score

4.0

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Qbittorrent	Qbittorrent	< 5.1.2

Related Weaknesses (CWE)

CWE-669

References

FAQ

What is CVE-2025-54310?

CVE-2025-54310 is a vulnerability with a CVSS score of 4.0 (MEDIUM). qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.

How severe is CVE-2025-54310?

CVE-2025-54310 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-54310?

Check the references section above for vendor advisories and patch information. Affected products include: Qbittorrent Qbittorrent.