Qbittorent in particular has had several webui exploits in the past. The most recent was a few months ago and it was pretty bad: https://github.com/qbittorrent/

Qbittorent in particular has had several webui exploits in the past. The most recent was a few months ago and it was pretty bad: https://github.com/qbittorrent/qBittorrent/issues/18618 https://github.com/qbittorrent/qBittorrent/issues/18618 Putting nginx in front with http basic auth would prevent all of them.