---
id: CVE-2025-11371
title: >-
  In the default installation and configuration of Gladinet CentreStack and
  TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows
  unintended disclosure of system files
summary: >-
  In the default installation and configuration of Gladinet CentreStack and
  TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows
  unintended disclosure of system files. Exploitation of this vulnerability has
  been obser…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-552
vendor: gladinet
product: centrestack
affected:
  - centrestack < 16.10.10408.56683
  - triofox <= 16.7.10368.56560
patched:
  - centrestack 16.10.10408.56683
published: '2025-10-09'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11371'
references:
  - url: >-
      https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw
    label: 5dacb0b8-2277-4717-899c-254586fe4912
  - url: 'https://www.centrestack.com/p/gce_latest_release.html'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11371
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - kev
  - in-the-wild
  - exploit-available
  - cve.org
epss: 0.92137
epssPercentile: 0.9982
kev: true
kevDateAdded: '2025-11-04'
kevDueDate: '2025-11-25'
kevRansomware: false
exploited: true
exploits:
  github: 3
  githubRepos:
    - 'https://github.com/rxerium/CVE-2025-11371'
    - 'https://github.com/lap1nou/CVE-2025-11371'
    - 'https://github.com/NetVanguard-cmd/CVE-2025-11371'
  metasploit:
    - auxiliary/gather/gladinet_storage_path_traversal_cve_2025_11371
  nuclei:
    - CVE-2025-11371
  checkedAt: '2026-10-26T21:40:51.081Z'
exploitAvailable: true
ssvc:
  exploitation: active
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2025-11-04T04:55:24.660911Z'
ingestedAt: '2026-09-21T17:49:53.184Z'
---

## Overview

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. 

This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

## Affected

- `centrestack < 16.10.10408.56683`
- `triofox <= 16.7.10368.56560`

## Remediation

Upgrade past the affected range:

- `centrestack 16.10.10408.56683`