PT-2026-5334 · Amidaware · Amidaware Tactical Rmm

Published 2026-01-29 · Updated 2026-01-30 · CVE-2025-69516

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amidaware Tactical RMM versions prior to 1.3.2

Description A Server-Side Template Injection (SSTI) exists in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM. The issue stems from insufficient sanitization of the template md parameter, which allows for the injection of Jinja2 templates. This is due to the misuse of the generate html() function, where user-controlled values are inserted into env.from string, a function that processes Jinja2 templates. Successful exploitation allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the server.

Recommendations Update Amidaware Tactical RMM to version 1.3.2 or later. As a temporary workaround, restrict access to the /reporting/templates/preview/ endpoint.

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2025-69516

Affected Products

Amidaware Tactical Rmm

References · 9

• https://osv.dev/vulnerability/CVE-2025-69516 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69516 · Security Note
• https://github.com/amidaware/tacticalrmm · Note
• https://amidaware.com · Note
• https://twitter.com/VulmonFeeds/status/2016988573434540293 · Twitter Post
• https://twitter.com/CVEnew/status/2016964337794195522 · Twitter Post
• https://twitter.com/SNISS8/status/2017051341961453785 · Twitter Post
• https://twitter.com/TheHackerWire/status/2017000400122237329 · Twitter Post
• https://gist.github.com/NtGabrielGomes/7c424367cc316fd7527f668ff076fece · Note