PatchTheCVEpeertube vulnerabilities and fixes
Recent CVEs affecting peertube, with upgrade or downgrade steps. 7 tracked.
peertube has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-04-15. Highest priority: CVE-2025-32947 (score 50/100).
- CVE-2025-32949 MEDIUM 6.5 UPGRADE This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk spa
- CVE-2025-32948 HIGH 7.5 UPGRADE The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases se
- CVE-2025-32947 HIGH 7.5 UPGRADE This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an i
- CVE-2025-32946 MEDIUM 5.3 UPGRADE This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub pr
- CVE-2025-32945 MEDIUM 4.3 UPGRADE The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube RE
- CVE-2025-32944 MEDIUM 6.5 UPGRADE The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persiste
- CVE-2025-32943 LOW 3.7 UPGRADE The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerT
FAQ
How do I fix peertube vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is peertube being exploited right now?
None of the tracked peertube CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which peertube CVE should I patch first?
CVE-2025-32947 currently ranks highest (50/100): This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an i.