CVE-2019-25269CWE-428

Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability

High · published February 4, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

⚡ An unquoted service path vulnerability in Amiti Antivirus could let attackers execute malicious code with elevated privileges! This is like leaving the door wide open for thieves if they know the right combination. 🔥 Picture a restaurant where the kitchen staff doesn’t check the name on the order before cooking. If a mischievous diner slips in a fake order, they could get a gourmet meal while everyone else is served plain toast! If exploited, an attacker could inject and run malicious code as LocalSystem, essentially gaining full control over the affected system. They could steal sensitive data, manipulate system settings, or even install additional malware, leading to a catastrophic security breach!

Put simply

Picture a restaurant where the kitchen staff doesn’t check the name on the order before cooking. If a mischievous diner slips in a fake order, they could get a gourmet meal while everyone else is served plain toast! This vulnerability arises from the improper handling of service paths in the Windows service configurations, allowing attackers to place executable files in specific directories and execute them without proper validation.

What to do

If exploited, an attacker could inject and run malicious code as LocalSystem, essentially gaining full control over the affected system. They could steal sensitive data, manipulate system settings, or even install additional malware, leading to a catastrophic security breach! To protect yourself, immediately update Amiti Antivirus to the latest version where this issue is patched. Additionally, review your service configurations to ensure paths are correctly quoted and secure. Regular system audits can further minimize risks. 🛡️ You've got this! Follow the steps, secure your setup, and you'll be a security hero in no time! 🎉

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00370 · 29.8th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-04T23:15Z
EPSS history
Timeline
  • 04 FEB 23:15Z
    Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability
    cvelistv5