CVE-2026-57079— Sanko Robinson Net::BitTorrent 路径遍历漏洞

Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata

Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata. Net::BitTorrent validates file path components only on the .torrent-file ingest path. The peer and magnet metadata path (_on_metadata_received, reached from the BEP09 ut_metadata extension) passes attacker-supplied file names straight to Storage::add_file and Storage::_parse_file_tree, where Path::Tiny's child() does not collapse "..". A v2 file tree key, a v1 files[].path element, or a single-file name containing ".." segments therefore resolves outside the download directory. Because the peer also controls the piece hashes and the served bytes, content verification passes, so a malicious magnet or peer writes attacker-chosen content to an attacker-chosen path on the downloading host.

N/A

对路径名的限制不恰当(路径遍历)

Sanko Robinson Net::BitTorrent 路径遍历漏洞

Sanko Robinson Net::BitTorrent是Sanko Robinson个人开发者的一个基于现代 Perl（v5.40+）从头重写的高性能 BitTorrent 客户端库，支持 BitTorrent v2、DHT、协议加密等完整功能，且可与任意事件循环集成。 Sanko Robinson Net::BitTorrent 2.0.1及之前版本存在路径遍历漏洞，该漏洞源于对对等体提供的元数据缺乏路径验证，导致路径遍历，可能允许攻击者将文件写入下载目录之外。

N/A

N/A