A warning was published about a flaw in AmidaWare Tactical RMM

2026-11-13

KROMSE explanation

AmidaWare Tactical RMM has a critical security flaw (CVE-2026-129165, CVSS 9.4). The official record says: Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF.

No confirmed attacks and no public attack code yet.

Anyone running AmidaWare Tactical RMM.

Install the maker's update for AmidaWare Tactical RMM as soon as it is out.
Not sure if you use it? KROMSE can check your product for free.

KROMSELive threat centreSign inAdd your repository or website to see if it impacts youAdd repo or website

A warning was published about a flaw in AmidaWare Tactical RMM

KROMSE explanation

Loading the story…