This vulnerability (CVE-2026-8801) in Progress MOVEit Transfer relates to CWE-46 (Path Equivalence) and involves improper handling of filenames containing trailing spaces in the file upload modules. This can cause path equivalence issues, potentially allowing an attacker with limited privileges to influence file handling behavior. The affected versions are those before 2025.0.8 and from 2025.1.0 before 2025.1.4. The CVSS 3.1 base score is 3.5, indicating low severity, with network attack vector, low attack complexity, requiring low privileges and user interaction, and impacts integrity but not confidentiality or availability. No official remediation level or patch links are provided in the available data.

The vulnerability may allow an attacker with low privileges and requiring user interaction to cause integrity issues related to file handling due to path equivalence with trailing spaces in filenames. There is no impact on confidentiality or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch information is provided, users should monitor Progress's advisories for updates and apply patches once available. Until then, consider restricting user privileges and validating filenames to mitigate potential exploitation.