GNU Wget2 Metalink Path Traversal Vulnerability Allowing Arbitrary File Overwrite

A path traversal vulnerability has been identified in GNU Wget2's handling of Metalink documents. The issue stems from inadequate validation of file paths in Metalink <file name> elements, allowing attackers to manipulate path values and write files to unintended locations. This vulnerability is remotely exploitable, requires no authentication, and could lead to data loss or unauthorized code execution by overwriting configuration files used by the user.

Impact

Exploitation of this vulnerability allows for arbitrary file writes, with the potential to overwrite critical files that could be used to execute code, such as programs or libraries. This could also lead to bypassing security mechanisms by manipulating files used for authentication or other protective measures.