CVE-2025-1241 Encryption vulnerable to brute-force decryption in GoAnywhere MFT
Admin users can brute-force decrypt data due to static IV usage in GoAnywhere MFT encryption.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1241?
CVE-2025-1241 is a medium-severity vulnerability in Fortra GoAnywhere MFT, published on 21 Apr 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.
Weakness: CWE-326
Which versions are affected by CVE-2025-1241?
It affects 2 products.
Products include Fortra Goanywhere Agents, Fortra Goanywhere Managed File Transfer.
How do I fix CVE-2025-1241?
No fix has been published for CVE-2025-1241 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1241 being exploited?
There is no known exploitation of CVE-2025-1241 in the wild and no public exploit code.
Sources
Also known as GHSA-fcmx-wcc5-gf8w.