CVE-2019-25269 HIGH

CVE-2019-25269: Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability

Vendor Netgate

Product Amiti Antivirus

Weakness CWE-428

Published February 4, 2026

Last update February 6, 2026

View on NVD All CVEs

CVSS base score

8.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.

Key dates

02Disclosure timeline

February 4, 2026 CVE published

February 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-25269 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/428.html

Related vulnerabilities

04Related CVE

CVE-2023-6631 Subnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element CVE-2019-25266 Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path CVE-2025-0884 Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager. CVE-2016-20055 IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation CVE-2019-25306 BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path