Summary
It was discovered that Transmission had a clickjacking weakness in the
browser-facing WebUI and RPC response paths. An attacker could possibly use
this issue to trick users into performing unintended actions.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | transmission | 3.00-2ubuntu2.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | transmission | 4.0.5-1ubuntu0.1 |
| Ubuntu · 25.10 | transmission | 4.1.0~beta2+dfsg-3ubuntu1.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | transmission | 4.1.1+dfsg-1ubuntu1.1 |
Vulnerabilities 1
-
Medium 5.3
transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.
References
-
report
https://ubuntu.com/security/CVE-2026-38978