---
id: CVE-2019-25269
title: Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability
summary: >-
  Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in
  its Windows service configurations. Attackers can exploit the unquoted path to
  inject and execute malicious code with elevated LocalSystem privileges by
  placing …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-428
vendor: Netgate
product: Amiti Antivirus
affected:
  - amiti_antivirus 25.0.640
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-02-06T20:30:08.739884Z'
exploitAvailable: true
published: '2026-02-04'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T00:54:07.849Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2019-25269'
references:
  - url: 'https://www.exploit-db.com/exploits/47747'
    label: ExploitDB-47747
  - url: 'http://www.netgate.sk/'
    label: Vendor Homepage
  - url: >-
      https://www.vulncheck.com/advisories/amiti-antivirus-unquoted-service-path-vulnerability
    label: >-
      VulnCheck Advisory: Amiti Antivirus 25.0.640 - Unquoted Service Path
      Vulnerability
tags:
  - cve.org
  - exploit-available
epss: 0.0037
epssPercentile: 0.30803
ingestedAt: '2026-10-27T16:11:59.189Z'
---

## Overview

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.

## Affected

- `amiti_antivirus 25.0.640`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.