The vulnerability is an improper authentication flaw that enables an attacker to bypass the standard login process in Progress MOVEit Automation. Because it allows attackers to circumvent authentication controls, the attacker can gain unauthorized access to the system. This weakness is related to CWE‑305, which describes improper authentication. No additional privilege escalation or other impact details are provided in the CVE data.

The affected product is Progress Software MOVEit Automation. Vulnerable releases include any version up to and including 2025.0.8, any 2024.0.0‑2024.1.7, and any release before 2024.0.0.

The CVSS score of 9.8 indicates a critical severity. The EPSS score is not provided, and the vulnerability is not currently listed in CISA KEV. Based on the description, no explicit vulnerability vector is disclosed; however, the implication that authentication can be bypassed suggests a remote exploitation path through the MOVEit Automation interface. The high CVSS score means that if an attacker can exploit the flaw, they can gain full unauthorized access. The lack of an EPSS score or KEV listing does not reduce the urgency, as the maximum severity warrants immediate attention.