CVE-2025-58959: Path Traversal in AmentoTech Taskbot

The Arbitrary File Access vulnerability allows an attacker to bypass intended access controls and read files outside of the intended directory. Successful exploitation could lead to the disclosure of configuration files, source code, or other sensitive data stored on the server. Depending on the files accessible, this could lead to further compromise, including privilege escalation or data exfiltration. The impact is amplified if the Taskbot installation is used to manage critical business processes or stores sensitive user data.

1. Reserved2025-09-06
2. Published2025-10-22
3. Modified2026-04-28
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-58959 is to immediately upgrade Taskbot to version 6.4.1 or later. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests containing path traversal sequences (e.g., ../). Carefully review Taskbot's file permissions to ensure that only necessary files are accessible to the webserver user. Monitor Taskbot logs for suspicious file access attempts. After upgrading, confirm the fix by attempting a path traversal attack and verifying that access is denied.