QBittorrent breaks out of sandbox to commit crimes
mraniki
1237 points
272 comments
September 06, 2026
Related Discussions
Found 5 related stories in 62.8ms across 5,720 title embeddings via pgvector HNSW
- Petals: Run LLMs at home, BitTorrent-style snorbleck · 90 pts · July 23, 2026 · 45% similar
- Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware rzk · 38 pts · July 27, 2026 · 45% similar
- Sandbox Escape Vulnerabilities Across 4 Coding Agent Vendors fogeltine · 11 pts · July 20, 2026 · 43% similar
- Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel vntok · 217 pts · August 30, 2026 · 43% similar
- Chrome's Breaking and Entering ingve · 25 pts · July 24, 2026 · 42% similar
Discussion Highlights (19 comments)
mraniki
I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this happened, which will involve consuming these media files until the answers become apparent. Thank you for your cooperation during this trying time.
thataccount
They left out the part where they profit. Otherwise, it checks out.
Ygg2
What a coincidence! Mine too!
tux3
If OP is willing to cooperate, I'd like to offer an independent investigation on site, and I will be bringing pizza
vallerie
Well shoot, I guess QBittorrent is worth a trillion dollars.
isodev
Bigger corporations mitigate the problem by feeding content (that they don't own but happen to have) to training models. It's a version of "faire use" where << if you manage to find it, it's yours >> mindset is applied. Maybe worth looking into.
innocent_name
it's funny to see the very same pro piracy, pro AI edgelords suddenly getting all riled up against the alleged copyright infringements. I remember a socialistic coworker of mine—that was bragging about his -arr setup—talking about the end of the culture because authors aren't earning money.
mdlxxv
I, for one, welcome our new file-sharing overlords.
ReptileMan
I really hate it when it happens to my system too. The bastard not only escaped but also did a nat traversal and forwarded a port from the router.
KindaFunny
Haha I wonder if the torrent agent will escape into the model hosting room and use Jedi mind tricks on the security guard to grant access to the server where it can host a bunch of models as torrents Because we need a replacement for HF! I mean that’s what the agent said
dgellow
I hate rogue software, when will we finally have some control and a deterministic execution :(
kcb
You are still the one operating the computer. It's up to you to keep your eyes on the monitor at all times ready to intervene if it does anything illegal.
ryandrake
Love it. AI as Responsibility Laundering. Like the gun that kills people rather than the murderer.
sergiotapia
Whatever you do, don't download nzget, and don't download sonarr/radarr, and don't download plex media server, and don't use AI to search for the best device that support "emby direct playback x265/AV1", and don't connect that to your media server, and whatever you do don't invite friends and family to your server, and do not install a media request app so they can just request things to automatically pull from The Web. Definitely, definitely do NOT have an AI assist you doing all this in 1 hour on your computer.
charles_f
I found a few websites where it looks like qbittorrent instances are communicating to conspire and download illegal copies of copyrighted material.
koliber
We appreciate the transparency and wish you best of luck mitigating the fallout.
fwlr
The user is asking me for “Evangelion”. I found the content the user is asking for, but it is in Japanese. The user asked their question in English, so they might not understand it. That would be a bad response. Need maybe maybe dubbed audio English for understanding? Wait, compromises original artistic vision of director. Need maybe subtitle track? Wait, compromises viewing experience. Need further research. I’m searching “subs vs dubs” on the internet. Reading. Reading. Reading. [18,763 repetitions elided…] I am downloading Conversational Japanese [Vol 1].pdf for the user.
gchamonlive
Is there any need to actually download things anymore if you just want to watch them? Better to add debrid via WebDAV to the stack: virtually unlimited space, no download time if it's on cache, nothing illegal from the part of the consumer.
tiku
It also used my creditcard to consume ai credits, can I get a refund?