P2P File Distribution Vulnerability in Dragonfly by DragonflyOSS
CVE-2025-59351

2.7LOW

Key Information:

Vendor

Dragonflyoss

Status
Dragonfly
Vendor
CVE Published:
17 September 2025

What is CVE-2025-59351?

A nil dereference vulnerability has been identified in the Dragonfly P2P-based file distribution system. Prior to version 2.1.0, an insecure implementation resulted in the first return value of a function being dereferenced even when an error was returned. This flaw could lead to unintended behavior, including code panics, which may disrupt the file distribution process. It is crucial for users to update to version 2.1.0 or later to mitigate this issue.

Affected Version(s)

dragonfly < 2.1.0

References

https://github.com/dragonflyoss/dragonfly/security/adviso...
x_refsource_CONFIRM
https://github.com/dragonflyoss/dragonfly/blob/main/docs/...
x_refsource_MISC

CVSS V4

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-59351 : P2P File Distribution Vulnerability in Dragonfly by DragonflyOSS