Cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atransmissionbttransmission/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 07:48:38 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTransmission: Permissive CORS vulnerability (CVE-2026-116748)https://feed.craftedsignal.io/briefs/2026-10-transmission-cors-vuln/Tue, 27 Oct 2026 07:48:38 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-transmission-cors-vuln/Transmission versions prior to 4.1.3 contain a permissive CORS vulnerability in the RPC server that allows unauthorized origins to capture the X-Transmission-Session-Id token and execute arbitrary RPC commands.Transmission versions 4.0.0 through 4.1.2 contain a permissive Cross-Origin Resource Sharing (CORS) vulnerability within the handle_request() function in rpc-server.cc. This vulnerability allows any web origin to read the X-Transmission-Session-Id anti-CSRF token during a 409 handshake response. By obtaining this token, an unauthorized actor can perform authenticated RPC requests, resulting in unauthorized configuration changes or data deletion.

Impact

Successful exploitation allows an unauthorized remote actor to perform several administrative actions, including:

  • Modifying the download directory.
  • Deleting torrents and local data.
  • Executing scripts via the script-torrent-done feature, which may lead to arbitrary command execution on the host running the Transmission RPC server.

Recommendation

  • Upgrade Transmission to version 4.1.3 or later immediately to resolve the insecure CORS handling.
  • Restrict access to the Transmission RPC interface to trusted networks only using firewall rules or a reverse proxy.
  • Review script-torrent-done configurations to ensure that no malicious scripts are configured to trigger upon torrent completion.
]]>highadvisory