Description

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted URL, which, upon user interaction with wget2, can lead to memory corruption. This can cause the application to crash and potentially allow for further malicious activities.

INFO

Published Date :

2026-01-09T07:57:17.240Z

Last Modified :

2026-02-26T15:04:52.822Z

Source :

fedora
AFFECTED PRODUCTS

The following products are affected by CVE-2025-69195 vulnerability.

Vendors Products
Gnu
  • Wget
  • Wget2
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-69195.

URL Resource
https://access.redhat.com/security/cve/CVE-2025-69195 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2425770 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-69195 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-69195 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact