{"id":132746,"date":"2025-11-10T07:38:21","date_gmt":"2025-11-10T07:38:21","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=132746"},"modified":"2025-11-10T07:49:41","modified_gmt":"2025-11-10T07:49:41","slug":"monsta-ftp-remote-code-vulnerability","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/","title":{"rendered":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited"},"content":{"rendered":"\n

A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.<\/p>\n\n\n\n

The flaw, now tracked as CVE-2025-34299<\/a>, affects multiple versions of the software and has been exploited in the wild.<\/p>\n\n\n\n

Monsta FTP is a browser-based file transfer client that allows users to manage files on remote servers without dedicated FTP software.<\/p>\n\n\n\n

With at least 5,000 instances exposed on the internet, the platform serves a diverse user base, including financial organizations and large enterprises.<\/p>\n\n\n\n

The Vulnerability and Patch Available<\/strong><\/h2>\n\n\n\n

The security flaw enables attackers to achieve pre-authenticated remote code execution on vulnerable Monsta FTP servers<\/a>.<\/p>\n\n\n\n

WatchTowr Labs researchers discovered that despite developers adding extensive input validation functions in recent updates, critical vulnerabilities remained unpatched across multiple versions.<\/p>\n\n\n\n

The attack works through a simple three-step process: An attacker tricks Monsta FTP into connecting to a malicious SFTP server. Downloads a crafted payload file.<\/p>\n\n\n\n

Writes that file to an arbitrary path<\/a> on the target server. This grants complete control over the vulnerable system.<\/p>\n\n\n\n

CVE ID<\/th>Vulnerability Type<\/th>Affected Version<\/th>Status<\/th>Exploitation<\/th><\/tr><\/thead>
CVE-2025-34299<\/a><\/td>Remote Code Execution (RCE)<\/td>Monsta FTP \u2264 2.11.2<\/td>Patched in v2.11.3 (Aug 26, 2025)<\/td>Active exploitation in the wild<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

The vulnerability affects versions 2.10.3 through 2.11, and researchers found that previously reported security flaws were never properly fixed.<\/p>\n\n\n\n

WatchTower Labs Analysis revealed<\/a> minimal code changes between versions 2.10.3 and 2.10.4, leaving known vulnerabilities intact with version updates.<\/p>\n\n\n\n

Monsta FTP released version 2.11.3 on August 26, 2025, which addresses this critical vulnerability<\/a>.<\/p>\n\n\n\n

Organizations running Monsta FTP should immediately upgrade to the latest version to protect their systems.<\/p>\n\n\n\n

The discovery highlights ongoing security challenges in web-based file management systems, particularly when legacy vulnerabilities persist despite multiple software updates.<\/p>\n\n\n\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide. The flaw, now tracked as CVE-2025-34299, affects multiple versions of the software and has been exploited in the wild. Monsta FTP is a browser-based file transfer client that allows users to manage files on remote […]<\/p>\n","protected":false},"author":27,"featured_media":132748,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp","fifu_image_alt":"Monsta FTP Remote Code Vulnerability","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,2737],"tags":[149,151,416],"class_list":{"0":"post-132746","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-vulnerability-news","9":"tag-cyber-security","10":"tag-cyber-security-news","11":"tag-vulnerability"},"yoast_head":"\nMonsta web-based FTP Remote Code Execution Vulnerability Exploited<\/title>\n<meta name=\"description\" content=\"A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Monsta web-based FTP Remote Code Execution Vulnerability Exploited\" \/>\n<meta property=\"og:description\" content=\"A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-10T07:38:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-10T07:49:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Abinaya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Abinaya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited","description":"A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited","og_description":"A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.","og_url":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-11-10T07:38:21+00:00","article_modified_time":"2025-11-10T07:49:41+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp","type":"image\/jpeg"}],"author":"Abinaya","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Abinaya","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/"},"author":{"name":"Abinaya","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/1a94534cae789bad6ff3d6a1c4bfcda1"},"headline":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited","datePublished":"2025-11-10T07:38:21+00:00","dateModified":"2025-11-10T07:49:41+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/"},"wordCount":302,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news","vulnerability"],"articleSection":["Cyber Security News","Vulnerability News"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/","url":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/","name":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-11-10T07:38:21+00:00","dateModified":"2025-11-10T07:49:41+00:00","description":"A critical remote code execution vulnerability in Monsta FTP, a popular web-based FTP client used by financial institutions and enterprises worldwide.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#primaryimage","url":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900","caption":"Monsta FTP Remote Code Vulnerability"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/monsta-ftp-remote-code-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"Monsta web-based FTP Remote Code Execution Vulnerability Exploited"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World's #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/1a94534cae789bad6ff3d6a1c4bfcda1","name":"Abinaya","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/915429ce96054c30e324319044dd9dea3921978fcef4cc62ef69d7c2f53ce2a7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/915429ce96054c30e324319044dd9dea3921978fcef4cc62ef69d7c2f53ce2a7?s=96&d=mm&r=g","caption":"Abinaya"},"description":"Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.","sameAs":["https:\/\/www.cybersecuritynews.com"],"url":"https:\/\/cybersecuritynews.com\/author\/abi\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj7B6SWUHr6cmfWYp3q6x4HBdZF5HkO9nHicUl_W5GHx6UyIGp3uDoRTQBYlpvUjcjLj6rak8XH0WmpMws6O58FHmXexs9c57r_RkIpBEI3WWR1MrBxMP0phn3YIBeJGeHbpO-ommAFqLgioetJk7fktwoJsoEW4VX_TZtmN3GsP3Ea6CqdlPVemwuezHc\/s1600\/Monsta%20web-based%20FTP%20Remote%20Code%20Execution%20Vulnerability%20Exploited%20%281%29.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/132746","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=132746"}],"version-history":[{"count":3,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/132746\/revisions"}],"predecessor-version":[{"id":132756,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/132746\/revisions\/132756"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/132748"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=132746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=132746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=132746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}