CVE-2025-69194
HIGHGNU Wget2 < 2.2.1 - Path Traversal via Metalink File Name Element
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-69194. PoCs published by secdongle.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2025-69194, a path traversal vulnerability in GNU Wget2 <= 2.2.0. The exploit leverages a malicious Metalink file to achieve arbitrary file write/overwrite, potentially leading to remote code execution.
Description
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.
Exploits (1)
This repository contains a functional proof-of-concept exploit for CVE-2025-69194, a path traversal vulnerability in GNU Wget2 <= 2.2.0. The exploit leverages a malicious Metalink file to achieve arbitrary file write/overwrite, potentially leading to remote code execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H