CVE-2025-69194
published 2026-01-09CVE-2025-69194: A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink…
PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.71%
49.3th percentile
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wget2 | < wget2 2.2.0+ds-3 (forky) | wget2 2.2.0+ds-3 (forky) |
| gnu | wget2 | < 2.2.1 | 2.2.1 |
| gnu | wget2 | >= 0 < 2.2.0+ds-1+deb13u1 | 2.2.0+ds-1+deb13u1 |
| gnu | wget2 | >= 0 < 2.2.0+ds-3 | 2.2.0+ds-3 |
| msrc | azl3_wget_2.1.0-6_on_azure_linux_3.0 | — | — |
| msrc | azl3_wget_2.1.0-7_on_azure_linux_3.0 | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2025-69194: A security issue was discovered in GNU Wget2 when handling Metalink documents
osv·2026-01-09·CVSS 9.8
CVE-2025-69194 [CRITICAL] CVE-2025-69194: A security issue was discovered in GNU Wget2 when handling Metalink documents
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
GHSA
GHSA-82jv-f4jx-8r27: A security issue was discovered in GNU Wget2 when handling Metalink documents
ghsa_unreviewed·2026-01-09
CVE-2025-69194 [HIGH] CWE-22 GHSA-82jv-f4jx-8r27: A security issue was discovered in GNU Wget2 when handling Metalink documents
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Microsoft
Wget2: arbitrary file write via metalink path traversal in gnu wget2
vendor_msrc·2026-01-13·CVSS 8.8
CVE-2025-69194 [HIGH] CWE-22 Wget2: arbitrary file write via metalink path traversal in gnu wget2
Wget2: arbitrary file write via metalink path traversal in gnu wget2
Mariner: Mariner
fedora: fedora
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Red Hat
wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2
vendor_redhat·2025-12-29·CVSS 8.8
CVE-2025-69194 [HIGH] CWE-22 wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2
wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Statement: This vulnerability is
Debian
CVE-2025-69194: wget2 - A security issue was discovered in GNU Wget2 when handling Metalink documents. T...
vendor_debian·2025·CVSS 8.8
CVE-2025-69194 [HIGH] CVE-2025-69194: wget2 - A security issue was discovered in GNU Wget2 when handling Metalink documents. T...
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 2.2.0+ds-3)
sid: resolved (fixed in 2.2.0+ds-3)
trixie: resolved (fixed in 2.2.0+ds-1+deb13u1)
No detection rules found.
No public exploits indexed.
2026-01-09
Published