CyberRota Analysis
AI-GeneratedGopeed versions prior to 2.0.0-beta.3 are vulnerable to a path traversal flaw during archive extraction, allowing attackers to write arbitrary files outside the intended directory. This vulnerability can be exploited through maliciously crafted archives, potentially compromising system integrity when users download and extract files with AutoExtract enabled. Organizations using Gopeed should prioritize patching this issue to mitigate the risk of unauthorized file manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling file write operations when users download and extract archives with AutoExtract enabled.