GoKawiilConnectWise flags unpatched ScreenConnect file-transfer flaw, urges manual fix
ConnectWise disclosed a new security flaw in its ScreenConnect remote access platform affecting file transfer behavior in both cloud and on-premises deployments. The vulnerability has no CVE identifier yet and no official patch, though the company says a fix is coming later this week. In the meantime, ConnectWise published manual mitigation steps requiring administrators to disable file transfer permissions across user roles.
GoKawiil's interpretation of the reporting above, not reported fact.
ScreenConnect is widely used by IT support teams and MSPs, making it an attractive target for ransomware groups and state-sponsored hackers who have previously exploited similar flaws to distribute malware. With nearly 6,000 instances exposed online and no automated patch yet available, organizations face a window of risk that depends on administrators manually applying ConnectWise's workaround.
- A new unpatched ScreenConnect vulnerability affects file transfer sessions in cloud and on-prem setups.
- ConnectWise offers manual mitigation steps involving disabling TransferFiles permissions until a patch ships.
- Nearly 6,000 exposed ScreenConnect instances are tracked online, and the platform has a history of exploitation by ransomware and state-linked hackers.
Yubico YubiKey 5 NFC — When remote access tools like ScreenConnect are in the spotlight, locking down admin logins is the first line of defense. The YubiKey 5 NFC adds phishing-resistant hardware two-factor authentication to admin consoles and cloud accounts, and works over USB-A or by tapping a phone with NFC. It's a pocket-sized upgrade for any IT team managing remote sessions.
See Yubico YubiKey 5 NFC on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-07
Published there as: “ConnectWise warns of new ScreenConnect flaw without patch”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.