CVE-2025-46811

SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

CRITICAL 9.3EPSS 10.9%

A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.

Affected: SUSE · Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 · Image SLES15-SP4-Manager-Server-4-3-BYOS · Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure · Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 · Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE · SUSE Manager Server Module 4.3
CVSS v4.0 SUSE: 9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 SUSE: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 10.92% chance of exploitation in the next 30 days, 96th percentile
Published: 2025-07-30
Updated: 2026-02-26

CVE-2025-46811

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related