CVE-2025-55454: Dootask

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file.

Affected products

• Dootask Dootask: version 1.0.51 only

Published 2025-08-22. Last modified 2026-06-17.