CVE-2023-45685: Southrivertech Titan MFT Server

Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

Affected products

• Southrivertech Titan MFT Server: before 2.0.18 (fixed in 2.0.18)
• Southrivertech Titan Sftp Server: before 2.0.18 (fixed in 2.0.18)

Published 2023-10-16. Last modified 2026-06-17.