CVE-2025-7619: Path Traversal in BatchSignCS

The impact of CVE-2025-7619 is significant due to its potential for arbitrary code execution. An attacker could leverage this vulnerability to upload malicious files, overwrite critical system files, or inject malicious code into existing processes. Successful exploitation could grant the attacker complete control over the affected system. The attack vector is remote, requiring only a user to visit a malicious website, making it a widespread threat. This vulnerability shares similarities with other file write vulnerabilities where attackers can bypass security controls to gain unauthorized access and execute arbitrary code.

1. Reserved2025-07-14
2. Published2025-07-14
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-7619 is to immediately upgrade BatchSignCS to version 3.318.1 or later. If upgrading is not immediately feasible, consider implementing network-level controls to block access to known malicious websites. While a direct WAF rule is difficult to implement for this specific vulnerability, monitoring outbound traffic for unusual file writes could provide an early warning. Review BatchSignCS configuration to ensure it operates with the least privileges possible. After upgrading, confirm the fix by attempting to trigger the vulnerability with a known malicious payload and verifying that the file write is blocked.