Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-51774. PoCs published by Jordan Sharp.
AI-analyzed exploit summary This PoC exploits CVE-2024-51774 by intercepting qBittorrent's Python installer downloads via MITM and substituting them with a malicious executable. It leverages a man-in-the-middle attack to achieve remote code execution.
Description
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
Exploits (1)
exploitdb
WORKING POC
by Jordan Sharp · pythonlocalmultiple
https://www.exploit-db.com/exploits/52190
This PoC exploits CVE-2024-51774 by intercepting qBittorrent's Python installer downloads via MITM and substituting them with a malicious executable. It leverages a man-in-the-middle attack to achieve remote code execution.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
qBittorrent < 5.0.1
No auth needed
Prerequisites:
MITM position · qBittorrent attempting to download a Python installer
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Issue Tracking, Patch
https://news.ycombinator.com/item?id=42004219
Exploit, Patch
https://sharpsec.run/rce-vulnerability-in-qbittorrent/
Release Notes
https://www.qbittorrent.org/news
Scores
CVSS v3
8.1
EPSS
0.0330
EPSS Percentile
86.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-295
Status
published
Products (1)
qbittorrent/qbittorrent
< 5.0.1
Published
Nov 02, 2024
Tracked Since
Feb 18, 2026