There is a security gap in the CrushFTP data transfer software that gives attackers unauthorized access from the network.