EUVD-2026-31290
GHSA-whv3-47vh-qhwp
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.
AnalysisAI
Code integrity failure in ConnectWise Automate Agent versions prior to 2026.5 allows adjacent network attackers to substitute malicious components during plugin loading and self-update operations. The Automate agent does not fully verify the authenticity of downloaded components, enabling code execution at the agent's privilege level across managed endpoints. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all systems running ConnectWise Automate Agent versions prior to 2026.5 and implement network segmentation to isolate agents from untrusted networks. Within 7 days: Deploy firewall rules to restrict agent outbound connectivity to authorized plugin repositories only, enable behavioral monitoring for agent process anomalies, and establish incident response procedures. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today