qBittorrent 5.2.4
qBittorrent 5.2.4 fixes a cross-site scripting bug in the WebUI add-torrent dialog, adds a shared dialog for adding multiple torrents, and makes the AppImage run natively on Wayland.
Download APPIMAGE Project website ↗Download Mirrors
qBittorrent 5.2.4 was released on September 28, 2026, following 5.2.3. We covered it in the news.
Security fix
An XSS vulnerability in the WebUI’s add-torrent window title is fixed. A crafted torrent name could run script in your WebUI session. Update if you use the web interface, and keep it off the public internet; reach it over a VPN such as WireGuard instead.
Other changes
- A shared dialog for adding multiple torrents in the WebUI
- Better manual peer adding
- HTTP(S) links from RSS articles and search results can be opened
- The AppImage runs natively on Wayland
- Fixes for Shift-click batch selection, WebUI column order corruption, a Preferences crash in the Italian locale, and case-only renames
A release candidate for qBittorrent 5.3 is also available for testing.
Installing
The official site offers the AppImage, and Flathub and distribution repositories carry it. For headless servers, use the qbittorrent-nox package or the LinuxServer.io container, and consider qui as a modern interface for several instances.
Verify Your Download
Release files and their checksums are published on the GitHub release page.