uTox vulnerabilities
We track 1 vulnerability in uTox products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest uTox vulnerabilities
- 7.5 High severity
uTox: Improper Limitation of a Pathname to a Restricted Directory
uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume