Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. MOVEit Automation automates complex data workflows without requiring manual scripting and serves as a central automation orchestrator to schedule and manage file transfers between different systems, including local servers, cloud storage, and external partners. Tracked as CVE-2026-4670, the security flaw affects MOVEit Automation versions before 2025.1.5, 2025.0.9, and 2024.1.8. Remote threat actors can exploit it without privileges on the targeted systems in low-complexity attacks that don't require user interaction. "We have addressed the vulnerability and the Progress MOVEit Automation team strongly recommends performing an upgrade to the latest version," the company says in a Thursday advisory. "Upgrading to a patched release, using the full installer, is the only way to remediate this issue. There will be an outage to the system while the upgrade is running." The same day, Progress also released security updates to address a high-severity privilege escalation vulnerability (CVE-2026-5174) stemming from an improper input validation weakness in the same software. According to a Shodan search shared by PwnDefend cybersecurity consultant Daniel Card, over 1,400 MOVEit Automation instances are exposed online, and over a dozen are linked to U.S. local and state government agencies. However, there is no in...
Progress warns of critical MOVEit Automation auth bypass flaw
BleepingComputer
·Sergiu Gatlan
·Published May 4, 2026
·Updated
Affected Software
1 affected component
Progress Software MOVEit Automation<2025.1.5, <2025.0.9, <2024.1.8
Frequently Asked Questions
1
What is the main topic of this article?
The main topic of the article is a critical authentication bypass vulnerability in Progress Software's MOVEit Automation application.
2
What security implications are discussed?
The article discusses the risk of unauthorized access due to the critical authentication bypass flaw, potentially exposing sensitive data.
3
What products or software are affected?
The affected product is Progress Software's MOVEit Automation, which is used for managed file transfers.
4
What action are customers advised to take in response to the vulnerability?
Customers are advised to patch their MOVEit Automation applications to mitigate the risk associated with the vulnerability.
5
When was the warning about the vulnerability published?
The warning about the vulnerability was published on May 4, 2026.