---
id: CVE-2025-59384
title: A path traversal vulnerability has been reported to affect Qfiling
summary: >-
  A path traversal vulnerability has been reported to affect Qfiling. The remote
  attackers can then exploit the vulnerability to read the contents of
  unexpected files or system data.


  We have already fixed the vulnerability in the followin…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
vendor: qnap
product: qfiling
affected:
  - qfiling = 3.13.0
published: '2026-01-02'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T16:10:00.250'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-59384'
references:
  - url: 'https://www.qnap.com/en/security-advisory/qsa-25-54'
    label: security@qnapsecurity.com.tw
tags:
  - nvd
epss: 0.0052
epssPercentile: 0.42604
ingestedAt: '2026-10-14T16:40:32.060Z'
---

## Overview

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
Qfiling 3.13.1 and later

## Affected

- `qfiling = 3.13.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.