CVE-2025-35113 — Agiloft improper neutralization in EUI template engine
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a…
Published: 2025-08-26 · CVSS: 4.8 · CVSS 4.0
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7