CVE-2025-67160

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal

High · published January 2, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

⚡ A sneaky directory traversal flaw in Vatilon v1.12.37-20240124 could expose sensitive files with just the right URL! 📂 Think of it like a delivery driver who navigates poorly and ends up rifling through the backrooms of a store, accessing all those private stockrooms that should be off-limits. It’s a simple misstep that can lead to a treasure trove of sensitive data being uncovered! An attacker could exploit this vulnerability to access restricted directories and files, potentially revealing sensitive information or application configurations that could lead to further attacks. The risk is significant—once they’re in, they can see everything that was meant to be private!

Put simply

Think of it like a delivery driver who navigates poorly and ends up rifling through the backrooms of a store, accessing all those private stockrooms that should be off-limits. It’s a simple misstep that can lead to a treasure trove of sensitive data being uncovered! This directory traversal vulnerability allows attackers to manipulate file paths, granting them unauthorized access to sensitive files within the Vatilon application. This happens due to inadequate input validation, letting them trick the system into revealing data it should keep hidden.

What to do

An attacker could exploit this vulnerability to access restricted directories and files, potentially revealing sensitive information or application configurations that could lead to further attacks. The risk is significant—once they’re in, they can see everything that was meant to be private! To secure your application, upgrade to the latest version of Vatilon that addresses this vulnerability. Additionally, implement strict input validation for file paths to ensure users cannot navigate outside their intended directories. Regularly audit your file permissions too! You’ve got this! Follow these steps, and you’ll keep your data safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2026-01-02T00:00Z
EPSS history
Timeline
  • 02 JAN 00:00Z
    An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal
    cvelistv5