Agiloft Security Bulletin: RCE/XXE/Default Credentials (CVE-2025-35113 to 35116)

Critical Vulnerability Information CVE-2025-35113: Remote Code Execution via EUI Template Injection Affected Versions: Agiloft Release 19 through Release 28 Fixed Version: Release 31 Risk Context: Exploitation requires administrative access and the ability to import/edit EUI templates. Role-Based Access Control (RBAC) significantly limits exposure. Mitigation: Fully resolved in Release 31, including security measures to prevent unauthorized code execution via templates. CVE-2025-35114: XML External Entity (XXE) Vulnerability in Import Functionality Affected Versions: Agiloft Release 19 through Release 28 Fixed Version: Release 31 Risk Context: Exploitation requires access to the import functionality, which is restricted to administrator users via RBAC. This greatly reduces the risk of unauthorized access. Mitigation: Fully resolved in Release 31. All on-premise customers are advised to upgrade to this version. CVE-2025-35115: Default and Backdoor Credential Risk in On-Premise Installations Affected Versions: Agiloft Release 19 through Release 29 Fixed Version: Release 30 Risk Context: Improper configuration during on-premise installation may result in user accounts being created with default credentials. If these credentials are not changed, attackers could exploit them directly or perform successful offline brute-force attacks to escalate privileges. Mitigation: Starting with Release 30, account management has been strengthened to prevent creation of accounts with default or undocumented credentials. CVE-2025-35116: Insecure Package Download in On-Premise Installations Affected Versions: Agiloft Release 19 through Release 29 Fixed Version: Release 30 Risk Context: If the Agiloft installer is obtained from unofficial sources or installation occurs on insecure or untrusted networks, there is a window during which malicious actors could tamper with downloaded components. Mitigation: Starting with Release 30, all required packages are downloaded securely from verified sources using modern integrity verification methods.

Goal Reached Thanks to every supporter — we hit 100%!

Agiloft Security Bulletin: RCE/XXE/Default Credentials (CVE-2025-35113 to 35116)