Last updated
GNU Wget2 is the successor of GNU Wget, a file and recursive website downloader.
$ winget install --id GNU.Wget2 --exact --version 2.2.1Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
For IT teams
App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.
Sign up freeFree for up to 5 devices.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x64 | Portable | - | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
3 known CVEs via NVD
wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a...
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead...
See a CVE that affects your fleet? Pckgr RMM flags vulnerable devices and pushes the patched version automatically.
More from GNU or browse cross-platform, downloader, file-downlaoder.