P2P File Distribution Vulnerability in Dragonfly by DragonflyOSS

CVE-2025-59354

What is CVE-2025-59354?

Dragonfly, an open-source P2P file distribution and image acceleration system, is affected by a vulnerability that arises from its use of hash functions, including MD5, for validating downloaded files. Attackers can exploit this weakness by replacing legitimate files with malicious ones that produce a matching hash value, enabling file integrity breaches. This issue has been resolved in version 2.1.0, where enhanced security measures were implemented to mitigate the risk of hash collisions.

References