CVE-2026-4670 is an authentication bypass vulnerability classified under CWE-305 in Progress Software MOVEit Automation. It affects multiple versions including 2025.0.0 before 2025.0.9, 2024.0.0 before 2024.1.8, and versions prior to 2024.0.0. The vulnerability allows attackers to bypass authentication mechanisms without any privileges or user interaction, enabling unauthorized access. The vulnerability has a CVSS 3.1 base score of 9.8, reflecting critical impact on confidentiality, integrity, and availability. No official patch or remediation level has been published by the vendor as of the data provided. The vulnerability is not related to a cloud service, and no known exploits have been reported in the wild.

Successful exploitation of this vulnerability allows an attacker to bypass authentication controls in MOVEit Automation, potentially gaining unauthorized access to sensitive data and administrative functions. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. Given the critical CVSS score of 9.8, the impact is severe. However, no known active exploitation has been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Progress Software's advisories closely for updates. Until a patch is available, consider restricting network access to MOVEit Automation instances and applying compensating controls to limit exposure.