CVE-2015-5474: Bittorrent

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

Affected products

• Bittorrent Bittorrent: any version
• Utorrent Utorrent: any version

Published 2015-08-13. Last modified 2026-06-17.