Description
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Agiloft | Agiloft | < Release 31 | Release 31 |
Advisories 1
- VA-25-239-01 Agiloft multiple vulnerabilities CISA ICS & IT advisories · Aug 26, 2025