CVE-2026-8650 — Authenticated Path Traversal allows MOVEit admins to view arbitrary system files

CVE-2026-8650

Authenticated Path Traversal allows MOVEit admins to view arbitrary system files PUBLISHED

Description (CNA)

Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

Affected (CNA)

Vendor / product	Versions
Progress / MOVEit Transfer	affected 2025.1.0 before 2025.1.3; affected 0 before 2025.0.7

CWE

CWE-23

References

https://docs.progress.com/bundle/moveit-transfer-release-notes-2026/page/Fixed-Issues-in-2026.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.