An uncontrolled memory allocation flaw exists in Progress Software MOVEit Automation that can lead to excessive allocation of system resources. The vulnerability allows an attacker to trigger allocations that exceed expected limits, potentially exhausting available memory and rendering the system unresponsive. The impact primarily affects availability by causing service disruption; no evidence indicates a direct confidentiality or integrity compromise.

The flaw affects versions of MOVEit Automation released before 2025.0.11 and those from 2025.1.0 up to but not including 2025.1.7. Users running the affected releases must consider upgrading to a fixed version to avoid the risk.

With a CVSS score of 5.9, the vulnerability represents a moderate risk level. No EPSS data is available, and the issue is not listed in the CISA KEV catalog. The likely attack vector is through exposed interfaces or APIs that the product makes available to external users, although this is inferred from the nature of the flaw and not explicitly detailed in the description. Attackers would need network or local access to trigger the excessive allocation, making it potentially easier to exploit than remote code execution but still significant enough to warrant prompt remediation.