PT-2025-23419 · Mageia · Deluge

Published 2025-05-31 · Updated 2025-05-31 · CVE-2025-46564

OSV

Limited unauthenticated file read in /flag. (CVE-2025-46561) New version check over unencrypted channel. (CVE-2025-46562) SSRF with information leak and limited unauthenticated file write. (CVE-2025-46563) Unauthenticated file read in /js may lead to RCE. (CVE-2025-46564) Mageia internal bug: deluge-daemon.service was not working; the update fixes this issue.

Related Identifiers

CVE-2025-46564

MGASA-2025-0174

Affected Products

Deluge

References · 3

• https://osv.dev/vulnerability/MGASA-2025-0174 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0174.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=34274 · Note