This vulnerability (CVE-2026-8485) in MOVEit Automation involves uncontrolled memory allocation (CWE-789), allowing an attacker to cause excessive memory consumption. It affects MOVEit Automation versions prior to 2025.0.11 and versions from 2025.1.0 up to but not including 2025.1.7. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability. No patch or official remediation level has been provided by the vendor as of the published date.

The vulnerability can cause excessive memory allocation leading to denial of service conditions, impacting the availability of MOVEit Automation services. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is indicated, organizations should monitor vendor communications for updates. Until a patch is available, consider limiting exposure of MOVEit Automation to untrusted networks and applying any recommended configuration changes from the vendor once available.