CVE-2025-11493
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by impersonating a legitimate server. This risk is mitigated when HTTPS is enforced and is related to CVE-2025-11492.
Risk Assessment
An attacker could replace files downloaded by the agent, potentially leading to arbitrary code execution on workstations, system integrity compromise, or data theft.
Recommendation
It is recommended to enforce HTTPS for all agent-server communications and monitor the integrity of downloaded files. Also, monitor security updates for ConnectWise Automate.
Other vulnerabilities in ConnectWise Automate Agent
Original NVD description (English source)
The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by impersonating a legitimate server. This risk is mitigated when HTTPS is enforced and is related to CVE-2025-11492.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS