CVE-2008-6586: Utorrent Webui

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.

Affected products

• Utorrent Utorrent Webui: version 0.315 only

Published 2009-04-03. Last modified 2026-06-16.