Description
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortra | GoAnywhere MFT | < 7.10.2 | 7.10.2 |
Advisories 1
- WID-SEC-2026-3300 Fortra GoAnywhere MFT: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 9, 2026