Read the docs
TI-2025-24581 Aliases CVE-2025-35112GHSA-256f-5whx-5j84

Agiloft XML external entity local path traversal

Priority LOW 23CWE-611Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00318 24th percentileScored 2026-11-07
Fix Fixed Agiloft (Agiloft): Release 31

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AtlassianAgiloftbefore Release 31Release 31Patch availableCNA
  • Agiloft VendorAtlassian Affected before Release 31 Fixed in Release 31 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:atlassian:agiloft:*:*:*:*:*:*:*:*19 to before 31VulnerableAtlassian
  • cpe:2.3:a:atlassian:agiloft:*:*:*:*:*:*:*:* Versions 19 to before 31 Vulnerable ·Atlassian

Remediation

  • Fix · CNA Agiloft (Agiloft) Fixed in Release 31

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Agiloft Release 31

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-24582 Agiloft improper neutralization in EUI template enginePriority LOW 22
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-35112
  2. 2026-10-03 Alias added: GHSA-256f-5whx-5j84

References

Advisory 3

  • TI-2025-24584 Agiloft insecure download of system packages CVSS 4.0CRITICAL 9.2
  • TI-2025-24583 Agiloft local privilege escalation via default credentials CVSS 4.0HIGH 8.7
  • TI-2025-24582 Agiloft improper neutralization in EUI template engine CVSS 4.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences