EUVD-2026-75175
GHSA-93h7-x9h6-vfvp
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Network endpoint, low complexity, low-privilege Web User required, scope changes to break sandbox, confidentiality-only impact via arbitrary file read.
Primary rating from Vendor (df4dee71-de3a-4139-9588-11b62fe6c0ff).
CVSS VectorVendor: df4dee71-de3a-4139-9588-11b62fe6c0ff
Lifecycle Timeline
3DescriptionCVE.org
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.
AnalysisAI
Path traversal in Fortra GoAnywhere MFT versions prior to 7.10.2 allows authenticated Web Users to escape their sandboxed home directory and read arbitrary files from the server filesystem. Exploitation requires a Web User account provisioned with both Secure Folders and Secure Mail permissions - a role combination common in production deployments of this enterprise MFT platform. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) a valid Web User account on the GoAnywhere MFT instance - unauthenticated access is not possible; (2) that account must be explicitly configured with BOTH Secure Folders AND Secure Mail permissions simultaneously - accounts with only one of these permissions cannot reach the vulnerable /attachRemoteFiles code path; (3) network access to the GoAnywhere Web Client interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.7 score (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) appropriately reflects a network-exploitable, low-complexity flaw requiring only low-privilege credentials, with high confidentiality impact due to scope change. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to GoAnywhere MFT 7.10.2 or later, which addresses the path traversal per vendor advisory fi-2026-011 (https://www.fortra.com/security/advisories/product-security/fi-2026-011). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, prioritize patching GoAnywhere MFT to version 7.10.2 or later on all affected systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-23 – Relative Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today