Medium · 4.5 CVE-2026-8650 EUVD-2026-42379GHSA-qp89-5wp8-rj83

Authenticated Path Traversal allows MOVEit admins to view arbitrary system files

Published Jul 8, 2026 · Updated Jul 9, 2026 · Assigned by ProgressSoftware

Description

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module).

This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

Vendor	Product	Affected	Fixed
Progress	MOVEit Transfer	2025.1.0 – < 2025.1.3, < 2025.0.7	2025.1.3