CVE-2025-1035: Path Traversal in Komtera Technolgies' KLog Server

Severity: medium (CVSS 5.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-02-18 · updated 2026-06-17
Weakness: CWE-22

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls. This issue affects KLog Server: before 3.1.1.

Affected products

Komtera Technolgies KLog Server: before 3.1.1 — fixed in 3.1.1

How to fix

Upgrade to a fixed version: Komtera Technolgies KLog Server 3.1.1. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0037
https://www.klogserver.com/surum-notlari/3-1-1/
https://www.usom.gov.tr/bildirim/tr-25-0037

Get alerted when CVE-2025-1035 or the next vulnerability affects your stack