CVE-2017-1000420: Syncthing

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite

Affected products

• Syncthing Syncthing: up to and including 0.14.33

Published 2018-01-02. Last modified 2026-06-17.