Description
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Agiloft | Agiloft | < Release 30 | Release 30 |
Advisories 1
- VA-25-239-01 Agiloft multiple vulnerabilities CISA ICS & IT advisories · Aug 26, 2025