An improper sanitization vulnerability in the BIG‑IP QKView utility permits a low‑privileged attacker to read sensitive information stored in a QKView file. The flaw falls under CWE‑532, meaning that confidential data can be exported via inadequate input validation and logging oversight.

The vulnerability affects F5’s BIG‑IP and BIG‑IQ platforms; no specific version range is supplied, so any deployment of these products that is still under support could be impacted.

The CVSS score of 7.1 indicates a high severity vulnerability. Although EPSS data is not available, the lack of KEV listing suggests that widespread exploitation has not yet been observed. The attack vector is most plausibly local, requiring the attacker to have low‑privileged access to the system already. Once a QKView file is accessed, an attacker can exfiltrate the contained sensitive data.