CVE-2025-46563
Updated deluge packages fix security vulnerabilities & bug
Limited unauthenticated file read in /flag. (CVE-2025-46561) New version check over unencrypted channel. (CVE-2025-46562) SSRF with information leak and limited unauthenticated file write. (CVE-2025-46563) Unauthenticated file read in /js may lead to RCE. (CVE-2025-46564) Mageia internal bug: deluge-daemon.service was not working; the update fixes this issue.
What each source reports
OSVMGASA-2025-0174 No score
Updated deluge packages fix security vulnerabilities & bug
Limited unauthenticated file read in /flag. (CVE-2025-46561) New version check over unencrypted channel. (CVE-2025-46562) SSRF with information leak and limited unauthenticated file write. (CVE-2025-46563) Unauthenticated file read in /js may lead to RCE. (CVE-2025-46564) Mageia internal bug: deluge-daemon.service was not working; the update fixes this issue.
- Record
MGASA-2025-0174- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
delugeMageia:9 From an advisory covering 4 CVEs |
before 2.2.0-1.5.mga9 | 2.2.0-1.5.mga9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-46563 is a vulnerability with no CVSS score yet in deluge, published May 31, 2025. No source lists public exploit code. No source names a fixed version.