Fortra Releases Patches for Critical GoAnywhere MFT Vulnerability

What's Happening?

Fortra has released patches for a critical vulnerability in its GoAnywhere managed file transfer (MFT) software, identified as CVE-2025-10035. This vulnerability, with a CVSS score of 10, involves the deserialization of untrusted data in the application's license servlet, potentially allowing command injection. Exploitation could lead to remote code execution by unauthenticated attackers. The vulnerability is significant due to its potential impact on systems exposed to the internet. Fortra has urged customers to update to GoAnywhere MFT version 7.8.4 and GoAnywhere MFT Sustain version 7.6.3, and to ensure the Admin Console is not publicly accessible.

Why It's Important?

The patching of this vulnerability is crucial for organizations using GoAnywhere MFT to secure their data exchanges. The flaw's potential for remote code execution poses a severe threat to data integrity and security, especially for systems exposed to external networks. The history of exploitation by ransomware groups like Cl0p underscores the importance of timely updates and vigilant monitoring of system logs for suspicious activity. Organizations must prioritize cybersecurity measures to protect against such vulnerabilities and mitigate risks associated with data breaches.

What's Next?

Fortra advises customers to monitor Admin Audit logs for unusual activity and to check log files for specific error messages indicating vulnerability impact. Cybersecurity firms may continue to assess the vulnerability's threat level and develop additional security recommendations. Organizations are encouraged to implement robust security protocols and conduct regular audits to ensure their systems are protected against emerging threats.