CVE-2020-25266: Appimage Appimaged

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it will accept a crafted mp3 file that contains an appimage, and install it.

Affected products

• Appimage Appimaged: before 1.0.3 (fixed in 1.0.3)

Published 2020-12-02. Last modified 2026-06-17.