This section outlines issues tracked and fixed by the MOVEit product team for the 2025 release.
Note: See the What's New section for a broader summary of features and improvements.

ID

Category

Fixed Issue
5675 SecAux, security Cookie in HTTPS session needs 'Secure' attribute.
62669 Custom notifications Default/custom email notifications - header background image is not included in the email notification.
69867 SSH Unable to manually add an Ed25519 or ECDSA SSH client key for a user.
81293 Folders, security Error behavior differs if folder ID exists.
82130 Ad Hoc, Web UI Package Print option can truncate CC line when two or more CC email addressees are present.
82494 AuditLog, security Changing user auth method is not audit logged.
83156, 85954 SSH, security SSH Cipher and Hash Functions list and default should align with recommendations made in Terrapin KB.
83321 ADA Compliance Enter Old Password input has multiple labels.
83699 Logs MOVEit Transfer Logs file only shows the current user account when editing the filter.
85410 Ad Hoc Guest user policy does not consider IP lockout policy scenario.
85587 Logs Org name field missing in audit logs for key rotation event.
86474 SFTP SFTP service can present unexpected host key if it can't load existing key.
87444 WebUI WebUI allows import of unsupported SSH client key.
87887 Config Utility, SSH SSH DSS-1024 host key deleted after enabling FIPS mode in MOVEit Transfer Config Utility.
87536 WebUI User lockouts not enabled by default.
88101 Uploads File with same name as subfolder may be uploaded to the subfolder.
88277 WebUI Cannot download Webpost copied as .csv file.
88287 Downloads, SFTP SSH session rekey causes some clients to hang or disconnect.
88595 SSH SSH host key fingerprint changed after upgrade to MOVEit Transfer 16.1.0.
88399 WebUI Favicon not scaled.
88766 AV-DLP, FTP FTP service can crash in a specific AV/DLP workflow.
88470 Installer Set permissions on message files.
89122 SQL Azure Nested query performance optimizations under load using SQL Azure.
89268 Database Application lock not released after a failed org logo update on a busy Webfarm deployment.
89274 Database, performance. Missing index on folder perms table can result in deadlocks.
89656 Outlook Add-in Package content not displayed after clicking View Secure Package.
90739 HTTPS, security All file transfers through Gateway are throttled to the speed of the slowest active HTTPS transfer.
90949 Ad Hoc, Cloud Responses to file requests in MOVEit Cloud do not include uploaded files.
91064 MySql, security Oracle MySQL Connectors (April 2025 CPU) Vulnerability.
91366 Server IP addresses in REMOTE_ADDR variable can cause web UI exception.