Novik vulnerabilities

Products

• ruTorrent 1

Latest Novik CVEs

Newest publication first

1. CVE-2026-121546 ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following

   Published 2026-11-03

   Medium·CVSS 6.0 EPSS 0.40%

   ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape the topDirectory jail because correctDirectory() does not resolve symbolic links. Attackers can submit a datadir path through a symlink under their top...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.