An improper authentication vulnerability exists in Progress Software WS_FTP Server on Windows versions prior to 2024.0.6 and 2025.0.3. This flaw could allow an unauthenticated remote attacker to gain access to sensitive information, including administrative credentials. The vulnerability has a critical severity rating with a CVSS score of 10.0, indicating high impact on confidentiality, integrity, and availability.