High severity8.8NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-69194

Description

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Wget22 versions
cpe:2.3:a:gnu:wget2:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:wget2:*:*:*:*:*:*:*:*range: <2.2.1
- (no CPE)
osv-coords2 versions
pkg:rpm/opensuse/wget2&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/wget2&distro=openSUSE%20Tumbleweed
< 2.2.1-bp160.1.1+ 1 more
- (no CPE)range: < 2.2.1-bp160.1.1
- (no CPE)range: < 2.2.1-1.1

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2025-69194nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000