https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T13:23:49.615809+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113352 CVE-2026-113352 — uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers 2026-10-24T13:23:49.618661+00:00

Affected: uTox

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft_find_resumeable() loads, abusing FILE pointers to write /proc/self/mem and execute code.