CVE-2025-27937: Sios Technology, Inc Quick Agent v2

High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product.

Affected products

• Sios Technology, Inc Quick Agent v2: before 2.9.8 (fixed in 2.9.8)
• Sios Technology, Inc Quick Agent v3: before 3.2.1 (fixed in 3.2.1)

Published 2025-04-28. Last modified 2026-06-17.