What is the CVSS score of CVE-2025-69517?

CVE-2025-69517 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Amidaware Inc Tactical RMM are affected by CVE-2025-69517?

Tactical RMM instances (v1.3.1 and earlier) contain a high-severity HTML injection vulnerability that allows authenticated users to inject malicious content into the management panel, potentially…

How to fix or mitigate CVE-2025-69517?

Within 24 hours: Audit user access logs for the /api/v3/newagent/ endpoint and identify all accounts with agent creation permissions; consider temporarily restricting agent creation to administrators only. Within 7 days: Implement WAF rules to block suspicious HTML/script patterns in the agent_id parameter and deploy network segmentation to limit RMM panel access to authorized IP ranges. Within 30 days: Contact Amidaware for patch availability and timeline; evaluate alternative RMM solutions if patching timeline is unacceptable; conduct a security review of all injected agent configurations.

Amidaware Inc Tactical RMM CVE-2025-69517

HIGH

Code Injection (CWE-94)

2026-01-28 cve@mitre.org

RCE Code Injection

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 28, 2026 - 16:16 nvd

HIGH 8.8

DescriptionCVE.org

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agent_id parameter accepts up to 255 characters and is improperly sanitized using DOMPurify.sanitize() with the html: true option enabled, which fails to adequately filter HTML input. The injected HTML is rendered in the Tactical RMM management panel when an administrator attempts to remove or shut down the affected agent, potentially leading to client-side attacks such as UI manipulation or phishing. NOTE: the Supplier's position is that this has incorrect information.

AnalysisAI

Technical ContextAI

This vulnerability (CWE-94: Code Injection) affects An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agent_id parameter accept. An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agent_id parameter accepts up to 255 characters and is improperly sanitized using DOMPurify.sanitize() with the html: true option enabled, which fails to adequately filter HTML input. The injected HTML is rendered in the Tactical RMM management panel when an administrator attemp

Affected ProductsAI

Product: An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agent_id parameter accept. Versions: up to 255.