uTox vulnerabilities (CVE)

CVE records published for uTox, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2026-113352 23 days ago

uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers

uTox uTox

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume…