Fortra Goanywhere Agents vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Fortra Goanywhere Agents: 1 record(s), with affected versions and fixes.
cpe:2.3:a:fortra:goanywhere_agents

CVE-2025-1241 Medium · 4.9 CWE-326 Apr 21, 2026

Encryption vulnerable to brute-force decryption in GoAnywhere MFT

Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.