CVE-2010-1512: Tatsuhiro Tsujikawa ARIA2

Medium severity, CVSS 4.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Affected products

• Tatsuhiro Tsujikawa ARIA2: up to and including 1.9.2; version 0.1.0 only; version 0.2.0 only; version 0.2.1 only; version 0.2.1+1 only; version 0.2.1+2 only; …

Published 2010-05-17. Last modified 2026-06-16.