PT-2025-29881 · Linknat · Linknat Vos3000+2

Zqsky · Published 2025-07-16 · Updated 2025-07-17 · CVE-2025-34118

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Linknat VOS Manager versions prior to 2.1.9.07 Linknat VOS2009 Linknat VOS3000 (early builds)

Description A path traversal issue exists in Linknat VOS Manager that allows unauthenticated remote attackers to read arbitrary files on the server. The vulnerability is accessible via multiple localized subpaths, such as '/eng/', '/chs/', or '/cht/', where files like 'js/lang en us.js' or their equivalents are loaded. Attackers can bypass input validation and disclose sensitive files by injecting encoded traversal sequences, such as '%c0%ae%c0%ae', into the request path.

Recommendations Update Linknat VOS Manager to version 2.1.9.07 or later. Update Linknat VOS2009 to a newer version. Update Linknat VOS3000 to a newer build.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

CVE-2025-34118

Affected Products

Linknat Vos Manager

Linknat Vos2009

Linknat Vos3000

References · 8

• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linknat_vos_traversal.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34118 · Security Note
• https://t.me/cvetracker/28003 · Telegram Post
• https://web.archive.org/web/20151013001957/http://wooyun.org/bugs/wooyun-2010-0145458 · Note
• https://twitter.com/VulmonFeeds/status/1945689135122972869 · Twitter Post
• http://linknat.com · Note
• https://vulncheck.com/advisories/linknat-vos-manager-path-traversal-file-disclosure · Note
• https://twitter.com/CVEnew/status/1945598205288149339 · Twitter Post