{"id":"CVE-2026-90861","kind":"vulnerability","aliases":["CVE-2026-90861"],"related":[],"title":"WS_FTP Server: admin passwords may leak in clear text on Windows","description":"Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.","summary":"Progress WS_FTP Server on Windows can expose a user's password in clear text to another administrator. That administrator could use the password to gain broader control of the server.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["file-transfer","infrastructure","windows","ws_ftp"],"not_affected_if":["non-windows-hosts","single-admin"],"how_to_check":"- Check the installed WS_FTP Server version against the fixed releases listed in the Fix section.\n- Confirm the server runs on Windows, since the flaw is described for that platform.","fix":"- WS_FTP Server `2024.0.7` for the 2024.0 line\n- WS_FTP Server `2025.0.4` for the 2025.0 line","status":"open","published_at":"2026-10-29T16:20:04+00:00","first_seen_at":"2026-10-29T16:26:01+00:00","triaged_at":"2026-10-29T16:31:17+00:00","updated_at":"2026-10-29T16:31:17+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-29T16:31:17Z","model":"claude-haiku-5-5","output":{"fix":"- WS_FTP Server `2024.0.7` for the 2024.0 line\n- WS_FTP Server `2025.0.4` for the 2025.0 line","reach":"local","title":"WS_FTP Server: admin passwords may leak in clear text on Windows","impact":"medium","summary":"Progress WS_FTP Server on Windows can expose a user's password in clear text to another administrator. That administrator could use the password to gain broader control of the server.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ws_ftp","windows","file-transfer"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Another administrator reads a password and gains broader server access","analyst_note":"","how_to_check":"- Check the installed WS_FTP Server version against the fixed releases listed in the Fix section.\n- Confirm the server runs on Windows, since the flaw is described for that platform.","plain_action":"","needs_analyst":false,"not_affected_if":["non-windows-hosts","single-admin"],"who_is_affected":"WS_FTP Server installations on Windows running versions before 2024.0.7 or 2025.0.4 are affected. The exposure is to other administrators on the server, so teams with a single administrator have less exposure. Servers on other platforms are not described as affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000662,"input_tokens":4109,"output_tokens":502,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-90861':15A,18A '2024.0.7':65C '2025.0.4':67C 'access':90C 'admin':4A 'administr':43B,45B,81C,89C 'anoth':42B,80C 'broader':52B,88C 'clear':9A,39B,77C 'control':53B 'could':46B,83C 'cve':13A,16A 'expos':33B,71C 'file':20B 'file-transf':19B 'ftp':2A,25B,28B,60C 'gain':51B,87C 'infrastructur':22B 'leak':7A 'may':6A,70C 'password':5A,37B,49B,75C 'prior':63C 'progress':26B,57C 'server':3A,29B,56B,61C,93C 'softwar':58C 'text':10A,40B,78C 'transfer':21B 'use':47B,84C 'user':35B,73C 'version':62C 'window':12A,23B,31B,69C 'ws':1A,24B,27B,59C","nicknames":[],"mitigations":[],"who_affected":"WS_FTP Server installations on Windows running versions before 2024.0.7 or 2025.0.4 are affected. The exposure is to other administrators on the server, so teams with a single administrator have less exposure. Servers on other platforms are not described as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T16:20:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-90861","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90861","severity":null,"published_at":"2026-10-29T16:20:04+00:00","modified_at":"2026-10-29T16:24:53+00:00","first_seen_at":"2026-10-29T16:26:01+00:00","fetched_at":"2026-10-29T16:26:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}