The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies to secure Wing FTP Server instances against an actively exploited vulnerability. The flaw, tracked as CVE-2025-47813, allows attackers with low privileges to obtain the application’s full installation path by abusing error messages generated through a manipulated UID cookie, potentially enabling further compromise. Researchers indicate the vulnerability can be chained with a critical remote code execution (RCE) flaw, CVE-2025-47812, which attackers began exploiting shortly after technical details were disclosed. Both vulnerabilities, along with an additional information disclosure bug (CVE-2025-27889) that could expose user passwords, were patched in Wing FTP Server version 7.4.4 in May 2025. After proof-of-concept exploit code was released by security researcher Julien Ahrens, CISA added CVE-2025-47813 to its Known Exploited Vulnerabilities (KEV) catalog and ordered Federal Civilian Executive Branch (FCEB) agencies to remediate the issue within two weeks under Binding Operational Directive 22-01. Although the directive applies only to federal agencies, CTIX analysts urge all organizations to patch immediately, warning that vulnerabilities in widely deployed file transfer servers remain a common and high-impact attack vector.