CVE-2026-121546 | Novik ruTorrent up to 5.3.19 datadir plugin correctDirectory path traversal

November 3, 2026 Yanac

A vulnerability was found in Novik ruTorrent up to 5.3.19. It has been classified as critical. Affected is the function correctDirectory of the component datadir plugin. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-121546. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More