CVE-2025-44177: Wss Protop

High severity, CVSS 8.2. EPSS: 4.4% chance of exploitation in the next 30 days.

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.

Affected products

• Wss Protop: version 4.4.2-2024-11-27 only

Published 2025-07-09. Last modified 2026-06-17.