diff --git a/pkgs/development/libraries/ffmpeg/5.nix b/pkgs/development/libraries/ffmpeg/5.nix
index faec9f125d25..22dbe293ef85 100644
--- a/pkgs/development/libraries/ffmpeg/5.nix
+++ b/pkgs/development/libraries/ffmpeg/5.nix
@@ -9,4 +9,10 @@ callPackage ./generic.nix (rec {
   branch = version;
   sha256 = "sha256-MrVvsBzpDUUpWK4l6RyVZKv0ntVFPBJ77CPGPlMKqPo=";
   darwinFrameworks = [ Cocoa CoreMedia VideoToolbox ];
+
+  # Newly introduced IPFS support in ffmpeg 5.1 relies on untrusted third
+  # party services, leading to consent and privacy issues. See upstream
+  # discussion for more information:
+  # https://ffmpeg.org/pipermail/ffmpeg-devel/2022-August/299924.html
+  patches = [ ./ipfs-remove-default-gateway.patch ];
 } // args)
diff --git a/pkgs/development/libraries/ffmpeg/ipfs-remove-default-gateway.patch b/pkgs/development/libraries/ffmpeg/ipfs-remove-default-gateway.patch
new file mode 100644
index 000000000000..e4b25a4b6cbf
--- /dev/null
+++ b/pkgs/development/libraries/ffmpeg/ipfs-remove-default-gateway.patch
@@ -0,0 +1,37 @@
+A gateway can see everything, and we should not be shipping a hardcoded
+default from a third party company; it's a security risk.
+
+Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
+---
+ libavformat/ipfsgateway.c | 11 ++++-------
+ 1 file changed, 4 insertions(+), 7 deletions(-)
+
+diff --git a/libavformat/ipfsgateway.c b/libavformat/ipfsgateway.c
+index 5a5178c563..907b61b017 100644
+--- a/libavformat/ipfsgateway.c
++++ b/libavformat/ipfsgateway.c
+@@ -240,13 +240,8 @@ static int translate_ipfs_to_http(URLContext *h, const char *uri, int flags, AVD
+         ret = populate_ipfs_gateway(h);
+ 
+         if (ret < 1) {
+-            // We fallback on dweb.link (managed by Protocol Labs).
+-            snprintf(c->gateway_buffer, sizeof(c->gateway_buffer), "https://dweb.link");
+-
+-            av_log(h, AV_LOG_WARNING,
+-                   "IPFS does not appear to be running. "
+-                   "You’re now using the public gateway at dweb.link.\n");
+-            av_log(h, AV_LOG_INFO,
++            av_log(h, AV_LOG_ERROR,
++                   "IPFS does not appear to be running.\n\n"
+                    "Installing IPFS locally is recommended to "
+                    "improve performance and reliability, "
+                    "and not share all your activity with a single IPFS gateway.\n"
+@@ -259,6 +254,8 @@ static int translate_ipfs_to_http(URLContext *h, const char *uri, int flags, AVD
+                    "3. Define an $IPFS_PATH environment variable "
+                    "and point it to the IPFS data path "
+                    "- this is typically ~/.ipfs\n");
++            ret = AVERROR(EINVAL);
++            goto err;
+         }
+     }
+