Buffer overflow in Gnu Wget2
CVE-2025-69195
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote…
Vulnerability class: Buffer Overflow
EPSS: 0.003 (21.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H.
Affected products
Weakness classification (CWE)
References
- patrick@puiterwijk.org (x_refsource_REDHAT, Third Party Advisory, vdb-entry)
- patrick@puiterwijk.org (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2025-69195?
- CVE-2025-69195 is a high-severity vulnerability in Gnu Wget2, classified under Stack-based Buffer Overflow. CVSS score: 7.6/10. Published 2026-01-09.
- How severe is CVE-2025-69195?
- High severity. CVSS v3 base score is 7.6 out of 10.