CVE-2026-67245 ASUSTOR Inc. CVE debrief

Who should care

Defenders responsible for Asustor ADM systems, particularly those using VPN Clients, should be aware of this vulnerability and prioritize verification and remediation efforts. This includes administrators, security teams, and vulnerability management teams who oversee Asustor ADM deployments. They should review the official advisory, assess their deployments for potential exposure, and apply patches or mitigations as recommended by the vendor.

Why it matters

Defenders should prioritize verifying and remediating this vulnerability in Asustor ADM 4.1.0 through 4.3.3.RUN1 and ADM 5.0.0 through 5.1.3.RI81 systems, as it allows an authenticated attacker to write files outside the intended directory, potentially leading to unauthorized data access or modification.

• An authenticated attacker can write files outside the intended VPN certificate directory, potentially leading to unauthorized data access or modification.
• The vulnerability allows an attacker to bypass intended directory restrictions, which could result in elevated privileges or unauthorized access to sensitive data.

Technical summary

The path traversal vulnerability in Asustor ADM VPN Clients occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an uploaded certificate file outside the intended VPN certificate directory, subject to process privileges and filesystem permissions. This vulnerability affects Asustor ADM versions 4.1.0 through 4.3.3.RUN1 and 5.0.0 through 5.1.3.RI81. Defenders should prioritize verifying and remediating this vulnerability in these systems, as it allows an authenticated attacker to write files outside the intended directory, potentially leading to unauthorized data or

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in Asustor ADM 4.1.0 through 4.3.3.RUN1 and ADM 5.0.0 through 5.1.3.RI81 systems, as it allows an authenticated attacker to write files outside the intended directory.

Recommended defensive actions

• Verify and remediate the vulnerability in Asustor ADM 4.1.0 through 4.3.3.RUN1 and ADM 5.0.0 through 5.1.3.RI81 systems
• Restrict access to the VPN Clients on the ADM to prevent authenticated attackers from exploiting the vulnerability
• Monitor for suspicious activity on the affected systems
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD vulnerability detail provide information on the path traversal vulnerability in Asustor ADM. The vendor advisory is available from Asustor's security advisory page. To verify and remediate this vulnerability, defenders should review the official advisory and assess their deployments for potential exposure. This includes checking for affected product versions and applying patches or mitigations as recommended by the vendor.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.