Skip to content
OpenAdvisories
High · 7.3 CVE-2025-12382 EUVD-2025-124977GHSA-5rfv-3h3m-2j9c

Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

Published Nov 12, 2025 · Updated Nov 13, 2025 · Assigned by AlgoSec

Description

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Affected products

VendorProductAffectedFixed
AlgoSec Firewall Analyzer A33.0 (up to build 320), A33.10 (up to build 210) —

References