uTox

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

uTox records in CISA KEV

No uTox vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76801 CVE-2026-113352 · GHSA-pqrg-92p8-w72h

Path traversal in uTox lets Tox friends write arbitrary files

LOW 36

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00586 Published 2026-10-20 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0