A Multi-Factor Authentication (MFA) bypass vulnerability exists in the SSH component of Progress Software WS_FTP Server on Windows. This flaw affects versions prior to 2024.0.6 and 2025.0.3, allowing authenticated users to bypass MFA requirements by exploiting improper association of authentication factors between accounts.