---
id: CVE-2026-93992
title: >-
  Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive
  extraction that allows attackers to write arbitrary files outside the
  extraction directory
summary: >-
  Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive
  extraction that allows attackers to write arbitrary files outside the
  extraction directory. Attackers can craft malicious archives with entries
  containing dir…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H'
cwe:
  - CWE-22
vendor: GopeedLab
product: gopeed
affected:
  - gopeed <= 2.0.0-beta.3
published: '2026-09-19'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T19:17:19.577'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93992'
references:
  - url: 'https://github.com/GopeedLab/gopeed'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GopeedLab/gopeed/blob/a5cd53f94c18ac65add684b1113fa5f0b47cc4da/pkg/download/extract.go#L284-L296
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GopeedLab/gopeed/blob/a5cd53f94c18ac65add684b1113fa5f0b47cc4da/pkg/download/extract_7z.go#L45-L53
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GopeedLab/gopeed/commit/38750d8505274e55cf11aa77f0694c71dd82f519
    label: disclosure@vulncheck.com
  - url: 'https://github.com/GopeedLab/gopeed/issues/1525'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/gopeed-through-2.0.0-beta.3-arbitrary-file-write-via-path-traversal
    label: disclosure@vulncheck.com
  - url: 'https://github.com/GopeedLab/gopeed/issues/1525'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-21T18:30:42.794936Z'
epss: 0.00795
epssPercentile: 0.54466
ingestedAt: '2026-09-19T23:10:34.244Z'
---

## Overview

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling file write operations when users download and extract archives with AutoExtract enabled.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.