PatchTheCVECVE-2025-11493: The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, suc
CVE-2025-11493 is a high-severity flaw (CVSS 8.8) affecting automate. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by impersonating a legitimate server. This risk is mitigated when HTTPS is enforced and is related to CVE-2025-11492.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 87%) |
| CISA exploited list | No |
| Weakness | CWE-494 |
| Published | 2025-10-16 |
| Last modified | 2026-10-09 |
Last updated 2026-10-09 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-11493?
automate: upgrade to 2025.9. Exact commands for each OS are on this page.
Is CVE-2025-11493 being exploited?
CVE-2025-11493 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-11493 affect?
CVE-2025-11493 affects automate. Severity is high (CVSS 8.8). The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle atta
How urgent is CVE-2025-11493?
Priority 34/100. High severity
Software pages
ConnectWise ScreenConnect vulnerabilities
Related CVEs
- CVE-2026-6066 HIGH 7.1 UPGRADE ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectW
- CVE-2025-11492 CRITICAL 9.6 UPGRADE In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS
- CVE-2025-8868 CRITICAL 9.8 UPGRADE In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker ca
- CVE-2025-6724 HIGH 8.8 UPGRADE In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker ca
- CVE-2026-9089 HIGH 8.8 UPGRADE The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin lo