VYPR
Unrated severityNVD Advisory· Published Jan 2, 2026· Updated Jan 5, 2026

Qfiling

CVE-2025-59384

Description

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later

Affected products

2
  • Qfiling/Qfilingllm-create
    Range: <3.13.1
  • QNAP Systems Inc./Qfilingv5
    Range: 3.13.x

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.