Path traversal in TAGFREE X-Free Uploader
Priority MEDIUM 44CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.
Summary
: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00461 40th percentileScored 2026-11-07
Fix Fixed X-Free Uploader (TAGFREE): 1.0.1.0085, 2.0.1.0035
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| TAGFREE | X-Free Uploader | 1.0.1.0084 to before 1.0.1.0085; 2.0.1.0034 to before 2.0.1.0035 | 1.0.1.0085, 2.0.1.0035 | Patch available | CNA |
- X-Free Uploader VendorTAGFREE Affected 1.0.1.0084 to before 1.0.1.0085; 2.0.1.0034 to before 2.0.1.0035 Fixed in 1.0.1.0085, 2.0.1.0035 Patch available CNA
Remediation
- Fix · CNA X-Free Uploader (TAGFREE) Fixed in 1.0.1.0085, 2.0.1.0035
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
TAGFREE X-Free Uploader 1.0.1.0085, 2.0.1.0035
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2025-21257 : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU…Priority MEDIUM 46
Timeline
- 2026-10-02 Threatist record created from CVE-2025-29865
- 2026-10-03 Alias added: GHSA-pm8c-8wxv-392p
References
More TAGFREE vulnerabilities
- TI-2025-21257 : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU… CVSS 4.0HIGH 8.8
Sources
- CVE-2025-29865 · CVE Program
- CVE-2025-29865 · NVD
- FIRST EPSS
- GHSA-pm8c-8wxv-392p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences