CVE-2009-1760: Rasterbar Software Libtorrent

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

Affected products

• Rasterbar Software Libtorrent: up to and including 0.14.3; version 0 only; version 0.12 only; version 0.12.1 only

Published 2009-06-11. Last modified 2026-06-16.