CVE-2025-32943: Framasoft Peertube

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint.

Affected products

• Framasoft Peertube: before 7.1.1 (fixed in 7.1.1)

Published 2025-04-15. Last modified 2026-06-17.