Amidaware Tactical RMM Remote Code Execution Vulnerability
Vulnerability
A remote code execution vulnerability exists in Amidaware Tactical RMM versions through 1.3.1. The issue arises in the '/api/tacticalrmm/apiv3/views.py' component, where improper HTML sanitization allows for the execution of arbitrary code.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where Tactical RMM is hosted.
Remediation
Users are advised to update Tactical RMM to version 1.4.0.
Added: Jan 28, 2026, 4:24 PM
Updated: Jan 28, 2026, 4:24 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.3remediation
0.0relevance
2.4threat
3.2urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.