CVE-2025-53594: QNAP Systems Inc Qfinder Pro Mac

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and later Qsync for Mac 5.1.5 and later QVPN Device Client for Mac 2.2.8 and later

Affected products

• QNAP Systems Inc Qfinder Pro Mac: from 7.13, before 7.13.0 (fixed in 7.13.0)
• QNAP Systems Inc Qsync For Mac: from 5.1, before 5.1.5 (fixed in 5.1.5)
• QNAP Systems Inc Qvpn Device Client For Mac: from 2.2, before 2.2.8 (fixed in 2.2.8)

Published 2026-01-02. Last modified 2026-06-17.