What’s Vulnerable › Vulnerabilities

CVE-2025-32943: PeerTube HLS Video Files Path Traversal

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-15 · updated 2026-06-17
• Weakness: CWE-22

Description

The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint.

Affected products

• chocobozzz/peertube: before 7.1.1 — fixed in 7.1.1

How to fix

Upgrade to a fixed version: chocobozzz/peertube 7.1.1. Check the vendor advisory for mitigations.

References

• https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1
• https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/
• https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/

Get alerted when CVE-2025-32943 or the next vulnerability affects your stack