CVE-2026-124582 | WebTorrent up to 2.8.5/3.0.21 File Path torrent.js getFileModtimes file.path path traversal (Issue 3012)

November 8, 2026 Yanac

A vulnerability, which was classified as problematic, was found in WebTorrent up to 2.8.5/3.0.21. Affected by this vulnerability is the function getFileModtimes of the file torrent.js of the component File Path Handler. Such manipulation of the argument file.path leads to path traversal.

This vulnerability is listed as CVE-2026-124582. The attack may be performed from remote. In addition, an exploit is available.

The reported GitHub issue was closed with the label “not planned”.VulDB Recent EntriesRead More