Research · Oct 9, 2025 · ZeroDay Catalog
Critical Vulnerability in Gladinet CentreStack and Triofox Exposes Files to External Access
A significant vulnerability in Gladinet CentreStack and Triofox allows unauthorized access to files, potentially exposing sensitive data to external parties.
What changed
A serious vulnerability has been identified in Gladinet CentreStack and Triofox, where files or directories can be accessed by external parties due to an unauthenticated Local File Inclusion flaw. This issue affects all versions up to and including 16.7.10368.56560.
The vulnerability has been observed being exploited in the wild, raising concerns about the security posture of organizations using these products.
Who is affected
Organizations utilizing Gladinet CentreStack and Triofox are at risk of unauthorized file access, which could lead to data breaches and compliance issues.
The following groups are particularly vulnerable:
- Gladinet CentreStack
- Gladinet Triofox
- All versions prior to and including 16.7.10368.56560
What to do
It is imperative for affected organizations to take immediate action to mitigate this vulnerability. Users should upgrade to the latest version of Gladinet CentreStack and Triofox to ensure they are protected against this flaw.
In addition, organizations should review their security configurations and consider implementing stricter access controls to prevent unauthorized access.
- Upgrade Gladinet CentreStack and Triofox to the latest version.
- Review and tighten access controls.
- Monitor systems for any signs of unauthorized access.