GNU Wget2 Vulnerability Enables Remote File Overwrite Attacks

A high-severity security flaw has been identified in GNU Wget2, a widely used command-line tool for downloading files from the web.

The vulnerability, designated as CVE-2025-69194, permits remote attackers to overwrite files on a user's system without authorization. This issue carries a CVSS score of 8.8, classified as high severity, indicating a significant risk for users who utilize the tool for downloading content.

Feature Details

CVE ID CVE-2025-69194

Vulnerability Type Arbitrary File Write (Path Traversal)

Severity High (Important)

CVSS Score 8.8 / 10

The vulnerability arises from the way Wget2 processes Metalink documents, which include various methods to download a single file, such as mirrors or peer-to-peer links. Ideally, Wget2 should strictly manage the destination paths for downloaded files. However, it fails to adequately verify the file paths specified in these Metalink documents.

This flaw is categorized as a Path Traversal vulnerability. An attacker can craft a malicious Metalink file with deceptive file paths, utilizing characters like "../" to navigate outside the intended download directory. If a user downloads and processes this malicious file, the attacker can direct Wget2 to write data to unauthorized locations on the system.

Overwrite Critical Files: Critical system files or user documents may be replaced or corrupted, potentially causing irreversible data loss. Execute Malicious Code: By altering configuration files or scripts that are automatically executed by the system, an attacker could gain control over the user's system. Bypass Security: Attackers could modify password files or security settings to lock users out or create unauthorized access points.

The exploit requires user interaction with a malicious file, but the potential impact underscores the importance of addressing this concern promptly.

Based on reporting by GBHackers.