{"id":"CVE-2025-53594","title":"A path traversal vulnerability has been reported to affect several product versions","summary":"A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have alre…","severity":"none","cwe":["CWE-22","CWE-59","CWE-367"],"published":"2026-01-02","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:10:00.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-53594","references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-25-55","label":"security@qnapsecurity.com.tw"}],"tags":["nvd"],"epss":0.00122,"epssPercentile":0.01822,"ingestedAt":"2026-10-14T19:49:57.545Z","slug":"CVE-2025-53594","body":"## Overview\n\nA path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following versions:\nQfinder Pro Mac 7.13.0 and later\nQsync for Mac 5.1.5 and later\nQVPN Device Client for Mac 2.2.8 and later\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}