[BUG] WebUI via HTTP creates a memory leak

[rockjob]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

Might be related to qbittorrent/qBittorrent#21651
Docker image: lscr.io/linuxserver/qbittorrent:5.1.4-libtorrentv1

When connecting to the web UI via HTTP the browser gives the following error message as a response:
Cookie “SID” has been rejected because a non-HTTPS cookie can’t be set as “secure”.
The request being sent is /api/v2/sync/maindata?rid=1
The RID is not being incremented.

This results in the memory usage slowly increasing until container or system crashes. It doesn't appear to release the memory when you close the browser.
A work around is possible by using HTTPS, however I don't think allowing HTTP connections that result in a memory leak style situation should be allowed.

Expected Behavior

The web UI should be able to run without exhausting the server of memory.

Steps To Reproduce

1. Connect to web UI via http
2. Leave web UI running
3. Watch memory usage increase.

Environment

- OS: Linux pi5 6.12.34+rpt-rpi-2712 #1 SMP PREEMPT Debian 1:6.12.34-1+rpt1~bookworm (2025-06-26) aarch64 GNU/Linux
- How docker service was installed: apt-get install docker

CPU architecture

arm64

Docker creation

services:
 qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:5.1.4-libtorrentv1
    container_name: qbittorrent

Container logs

#Nothing useful ever printed in docker logs. Only shows startup message.

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[github-actions]

A human has marked this issue as invalid, this likely happened because the issue template was not used in the creation of the issue.

[j0nnymoe]

Please provide your full compose for creating the container as well as the logs just so we can give it a once over to confirm no problems.

Where do you see this error get shown so we can try and replicate?.

[rockjob]

Screenshot of browser showing requests and errors:

Docker compose yml

services:
 qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:5.1.4-libtorrentv1
    container_name: qbittorrent
    network_mode: service:vpn
    depends_on:
     - vpn
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - WEBUI_PORT=<REDACTED>
    volumes:
      - <REDACTED>
    deploy:
     resources:
      limits:
       memory: 4096M
 vpn:
    container_name: openvpn_client
    image: dperson/openvpn-client:latest
    cap_add:
      - NET_ADMIN
    restart: unless-stopped
    volumes:
      - /dev/net/tun:/dev/net/tun
      - ./vpn-config:/vpn
    ports:
      - <REDACTED>
    environment:
      - DNS="8.8.8.8"
    entrypoint: ["/sbin/tini", "--", "/usr/bin/openvpn.sh", "-d"]
    networks:
      default:
       ipv4_address: <REDACTED>
networks:
 default:
  name: <REDACTED>
  external: true

Docker logs

[migrations] started
[migrations] no migrations found
usermod: no changes
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    1000
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: release-5.1.4_v1.2.20-ls96
Build-date: 2025-11-20T02:21:32+00:00
───────────────────────────────────────

[custom-init] No custom files found, skipping...
WebUI will be started shortly after internal preparations. Please wait...

******** Information ********
To control qBittorrent, access the WebUI at: http://localhost:<REDACTED>
Connection to localhost (127.0.0.1) <REDACTED> port [tcp/*] succeeded!
[ls.io-init] done.

[rockjob]

@j0nnymoe I just noticed I posted this in the docker-qbittorrent git. I think that might be a mistake. Do you think I should report the bug over at the main qbitorrent git?

[LinuxServer-CI]

This issue has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.