CVE-2025-69516

A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/ endpoint of Amidaware Tactical RMM, affecting versions equal to or earlier than v1.3.1, allows low-privileged users with Report Viewer or Report Manager permissions to achieve remote command execution on the server. This occurs due to improper sanitization of the template_md parameter, enabling direct injection of Jinja2 templates. This occurs due to misuse of the generate_html() function, the user-controlled value is inserted into `env.from_string`, a function that processes Jinja2 templates arbitrarily, making an SSTI possible.

• CWE-1336

• https://gist.github.com/NtGabrielGomes/7c424367cc316fd7527f668ff076feceThird Party Advisory
• https://github.com/amidaware/tacticalrmmProduct
• https://www.amidaware.com/Product

Published

Jan 29, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6947A stored cross-site scripting (XSS) vulnerability exists in …4.8
• CVE-2025-6948An issue has been discovered in GitLab CE/EE affecting all v…8
• CVE-2025-6949An Execution with Unnecessary Privileges vulnerability has b…9.3
• CVE-2025-6950An Use of Hard-coded Credentials vulnerability has been iden…9.9
• CVE-2025-6951A vulnerability classified as problematic was found in SAFEC…4.3
• CVE-2025-69515An issue in JXL 9 Inch Car Android Double Din Player Android…9.1
• CVE-2025-69517An HTML injection vulnerability in Amidaware Inc Tactical RM…8.8
• CVE-2025-6952A vulnerability, which was classified as problematic, has be…4.8
• CVE-2025-6953A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-69534Python-Markdown version 3.8 contain a vulnerability where ma…7.5
• CVE-2025-6954A vulnerability has been found in Campcodes Employee Managem…9.8
• CVE-2025-69542A Command Injection Vulnerability has been discovered in the…9.8