A vulnerability has been found in Keiyo TimeWorks up to 10.3 and classified as critical. This vulnerability affects unknown code of the component JSON File Handler. The manipulation leads to path traversal.

This vulnerability was named CVE-2025-41428. The attack can be initiated remotely. There is no exploit available.