CVE-2020-13431: GETI2P i2p

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.

Affected products

• GETI2P i2p: before 0.9.46 (fixed in 0.9.46)

Published 2020-06-16. Last modified 2026-06-17.