VULNERABILITY INTELLIGENCE

CVE-2025-51463

CVSS score7 HIGH

EPSS probability0.53%

CISA KEVNot currently listed

Published2025-07-22

Last modified2026-06-17

Description

Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.