CVE-2021-46830: Helpsystems GoAnywhere Managed File Transfer

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.

Affected products

• Helpsystems GoAnywhere Managed File Transfer: before 6.8.3 (fixed in 6.8.3)

Published 2022-07-27. Last modified 2026-06-17.