CVE-2025-70084: Opensatkit

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files via crafted value to the FileUtil_GetFileInfo function.

Affected products

• Opensatkit Opensatkit: version 2.2.1 only

Published 2026-02-11. Last modified 2026-06-17.