---
id: "CVE-2024-57728"
kind: "vulnerability"
aliases: ["CVE-2024-57728"]
title: "simple-help simplehelp: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the\u2026"
severity: "high"
cvss: 7.2
epss: null
exploited: true
status: "open"
category: "other"
products: [{"name": "SimpleHelp SimpleHelp", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "simple-help simplehelp", "fixed": ["5.5.8"], "affected": "< 5.5.8", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "other", "ransomware", "remote-support", "self-hosted", "simplehelp"]
not_affected_if: ["no-simplehelp-deployment"]
published_at: "2025-01-15T23:15:09+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T23:44:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57728", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# simple-help simplehelp: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the…

SimpleHelp, a remote support tool, has a zip slip path traversal bug that lets an admin user write files anywhere on the server. An attacker can use it to execute arbitrary code on the host as the SimpleHelp server user.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SimpleHelp SimpleHelp affected ? fixed ?
- vendor:simple-help simplehelp affected < 5.5.8 fixed 5.5.8

## Fix

Apply the vendor mitigation per CISA KEV guidance; the specific patched version is unknown from the sources. If no mitigation is available, discontinue use of the product.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-57728
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-57728

## From the sources

SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_