CVE-2026-93992

Name of the Vulnerable Software and Affected Versions Gopeed versions prior to 2.0.0-beta.4

Description A path traversal issue exists during archive extraction, allowing attackers to write arbitrary files outside the intended extraction directory. This occurs when users download and extract archives with the AutoExtract feature enabled. Attackers can achieve this by crafting malicious archives containing directory traversal sequences that bypass validation.

Recommendations Update Gopeed to version 2.0.0-beta.4 or later. Disable the AutoExtract feature as a temporary mitigation measure.