Wget2 vulnerabilities

2 known vulnerabilities in Wget2 from GNU. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Wget2: Stack-based Buffer Overflow

  CVE-2025-69195Jan 9, 2026GNU

  A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit

• 9.8 Critical severity

  Wget2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-69194Jan 9, 2026GNU

  A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the sy