Path Traversal Vulnerability in QNAP Operating Systems

CVE-2025-33032

What is CVE-2025-33032?

A path traversal vulnerability has been identified in certain versions of QNAP operating systems. This flaw enables a remote attacker who has gained administrator access to exploit the vulnerability, potentially allowing them to read sensitive files and system data that are typically not accessible. To mitigate this risk, users are advised to upgrade to the latest versions of QNAS: QTS 5.2.5.3145 build 20250526 or later, and QuTS hero h5.2.5.3138 build 20250519 or later, where the vulnerability has been effectively addressed.

References