qBittorrent 5.2.1 released with security fix and bug fixes
This is a maintenance update to the popular free, open-source BitTorrent client.
The qBittorrent team has released version 5.2.1, a maintenance update to the popular free, open-source BitTorrent client. The release follows closely on the heels of 5.2.0 and addresses a notable security vulnerability alongside several stability and usability bugs.
Security Fix
The most significant change is a fix for a high-severity vulnerability in how qBittorrent handles HTTP redirects. Previously, the application followed redirects without validating the destination URL scheme, meaning an attacker could craft a malicious redirect pointing to a file:// or ftp:// address. This could be exploited to access local files or probe internal network resources. Version 5.2.1 now enforces that any redirect target must use http, https, or magnet any other scheme causes the download to terminate with an error.
Bug Fixes
Beyond the security patch, 5.2.1 addresses a number of bugs carried over from the 5.2.0 cycle:
- Startup failure on upgrade: Users upgrading from older qBittorrent versions could hit a failure to launch caused by an incompatible legacy lock-file format. This is now handled gracefully.
- Potential crash with zlib: A crash and build compatibility issue with the latest zlib library has been resolved.
- Web UI fixes: Several Web UI regressions are corrected: adding a torrent from search, adding a magnet link on the first attempt, and a display issue in the torrent file list when both "Enable optimized table rendering (experimental)" and "Don't create subfolder" were active. RSS CPU spike. An infinite loop triggered when refreshing RSS feeds with no active subscriptions could peg a CPU core at 100%. This is now fixed.
- Python 3.14 compatibility on Linux: A multiprocessing pool incompatibility with Python 3.14 that could cause crashes in the search plugin subsystem has been resolved.
Review and Downloads
qBittorrent 5.2.1 review and downloads are available on UpdateStar for Windows, macOS, and Linux. On UpdateStar you can find also security insights answering recurring questions and related user issues regarding qBittorrent, with a focus on security concerns. These issues are based on real vulnerabilities. qBittorrent is free, open source, and ad-free.
Official download page: https://www.qbittorrent.org/download
about author
