CVE-2025-51463
Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the r…
Published: 2025-07-22 · CVSS: 7.0 · CVSS 3.1
Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7