SolarWinds Serv-U contains an authorization bypass vulnerability classified as CWE-639 (Authorization Bypass Through User-Controlled Key). This insecure direct object reference allows an attacker with a domain account possessing admin privileges and read/write access to the home directory to execute code remotely with root privileges. The vulnerability is more impactful on non-Windows platforms. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation can lead to remote code execution with root privileges, compromising confidentiality, integrity, and availability of the affected system. The requirement for a privileged domain account limits the attack surface, and the impact is reduced on Windows deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict domain account privileges and monitor access to the Serv-U home directory to limit exposure.