ConnectWise Patches Critical Flaw in Automate RMM Tool

ConnectWise has rolled out patches for two vulnerabilities in the Automate remote monitoring and management tool that could allow attackers to perform man-in-the-middle attacks. Last week, ConnectWise released Automate version 2025.9 with patches for CVE-2025-11492 (CVSS score 9.6), a critical-severity bug that allows attackers to intercept sensitive information transmitted in cleartext.

Additionally, the company warned of a high-severity flaw in the RMM software, tracked as CVE-2025-11493 (CVSS score 8.8), described as a lack of integrity checks when downloading code. These vulnerabilities could expose agent communications and updates to interception or tampering if certain configurations are used, and a threat actor performing a MiTM attack could replace updates with malicious ones.

Automate 2025.9 patch enforces HTTPS for all agent communications to mitigate these risks, and on-premises servers should enforce TLS 1.2 to maintain secure communications, according to ConnectWise. All organisations using on-premises ConnectWise Automate deployments are advised to update their installations as soon as possible.