PatchTheCVEqbittorrent vulnerabilities and fixes
Recent CVEs affecting qbittorrent, with upgrade or downgrade steps. 2 tracked.
qbittorrent has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-07-18. Highest priority: CVE-2024-51774 (score 60/100).
- CVE-2025-54310 MEDIUM 4.0 UPGRADE qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL
- CVE-2024-51774 HIGH 8.1 UPGRADE qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
FAQ
How do I fix qbittorrent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qbittorrent being exploited right now?
None of the tracked qbittorrent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qbittorrent CVE should I patch first?
CVE-2024-51774 currently ranks highest (60/100): qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors..