Transmission vulnerabilities
We track 1 vulnerability in Transmission products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Transmission vulnerabilities
- 8.8 High severity
transmission: Permissive Cross-domain Security Policy with Untrusted Domains
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response a