Description
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Agiloft | Agiloft | < Release 31 | Release 31 |
Advisories 1
- VA-25-239-01 Agiloft multiple vulnerabilities CISA ICS & IT advisories · Aug 26, 2025