qBittorrent 5.2.1 Released with A High Level Security Vulnerability Fix

qBittorrent, the popular free open-source BitTorrent client, released new 5.2.1 version today.

This is a maintenance release that primarily contains bug-fixes, including a fix for a high level security vulnerability.

Previously, the internal function handles HTTP redirects without confirming that the new URL is valid, thus attackers could provide malicious redirects (e.g., to file:// or ftp://) to access local files or internal network resources.

The new version added a check to ensure the redirected URL scheme is either http, https, or magnet. And, it returns error and terminate the download process when the URL scheme is invalid.

Besides the security fix, it also fixed the app start issue for users who upgraded qBittorrent from an old version that comes with old-format lock-file, as well as a potential crash and building issue with the latest zlib.

For the web UI, it fixed an issue adding torrent from search, an issue adding magnet link on first try, and torrent file display issue when “Enable optimized table rendering (experimental)” and “Don’t create subfolder” options enabled.

As well, it fixed the indefinitely call issue when refreshing RSS but no feed, which can cause 100% usage of a CPU core, and fixed the multiprocessing pool compatibility with Python 3.14 in Linux that can cause potential crashes.

Get qBittorrent 5.2.1

The changelog, official installers for Linux, Windows, and macOS, as well as the source tarball are available in Github via the link below:

qBittorrent 5.2.1

 

For Linux, select download the AppImage, add executable permission from its Properties dialog, finally run to launch the BitTorrent client.

Tips: Ubuntu since 22.04 does not support AppImage out-of-the-box, open terminal (Ctrl+Alt+T) and run the command below to install the required library for this format support.

sudo apt install libfuse2

For choice, Ubuntu user may search & install the community maintained qBittorrent (snap package) directly from App Center, or get the most recent .deb package from its official PPA. While, most Linux may also install the official Flatpak package which runs in sandbox environment.

source https://ubuntuhandbook.org/index.php/2026/05/qbittorrent-5-2-1-security-vulnerability/