Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.4

Qt on Windows temporary files can be hijacked

CVE-2025-4211 · published 1 year ago
Summary

Qt applications on Windows that use temporary file functions (such as QDir.tempPath, QStandardPaths, QTemporaryDir, or QTemporaryFile) may be tricked into using attacker‑controlled paths. This can let a malicious user place or run files with the application's privileges, potentially leading to unauthorized access. Upgrade Qt to version 5.15.19, 6.5.9, 6.8.2 or later to resolve the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
– qt qt <= 5.15.18
Ubuntu:Pro:16.04:LTS canonical qtbase-opensource-src All versions
Ubuntu:16.04:LTS canonical qtbase-opensource-src-gles All versions
Ubuntu:22.04:LTS canonical qt6-base All versions
Original advisory text
Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicio...
Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt Framework is QDir::tempPath() and anything that uses it, such as QStandardPaths with TempLocation, QTemporaryDir, and QTemporaryFile. This issue affects all version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8, from 6.6.0 through 6.8.1. It is fixed in Qt 5.15.19, Qt 6.5.9, Qt 6.8.2, 6.9.0
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published16 May 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-4211 · NVD
CVE-2025-4211 · MITRE
UBUNTU-CVE-2025-4211 · OSV
Track software like this
Free during beta