Path Traversal Vulnerability in QNAP VioStor Product
CVE-2025-52861

7HIGH

Key Information:

Vendor

QNAP
Status
ViOStor
Vendor
CVE Published:
29 August 2025

What is CVE-2025-52861?

A path traversal vulnerability has been identified in the QNAP VioStor product. When an attacker gains administrative access, they can exploit this flaw to gain unauthorized access to sensitive files and system data not intended for disclosure. The vulnerability has been addressed in versions starting from VioStor 5.1.6 build 20250621.

Affected Version(s)

VioStor 5.1.0 < 5.1.6 build 20250621

References

https://www.qnap.com/en/security-advisory/qsa-25-28

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

360 的安全研究员 侯留洋（[email protected]）
.
CVE-2025-52861 : Path Traversal Vulnerability in QNAP VioStor Product