Description
A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 | ? – < 5.0.27-150600.3.33.1 | 5.0.27-150600.3.33.1 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS | ? – < 4.3.87-150400.3.110.2 | 4.3.87-150400.3.110.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure | ? – < 4.3.87-150400.3.110.2 | 4.3.87-150400.3.110.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 | ? – < 4.3.87-150400.3.110.2 | 4.3.87-150400.3.110.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE | ? – < 4.3.87-150400.3.110.2 | 4.3.87-150400.3.110.2 |
| SUSE | SUSE Manager Server Module 4.3 | ? – < 4.3.87-150400.3.110.2 | 4.3.87-150400.3.110.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server Module 4.3 | cobbler | 3.3.3-150400.5.58.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | grafana-formula | 4.3.0-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | inter-server-sync | 0.3.7-150400.3.39.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacecmd | 4.3.31-150400.3.48.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-admin | 4.3.14-150400.3.15.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-backend | 4.3.33-150400.3.55.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-client-tools | 4.3.23-150400.3.39.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-config | 4.3.16-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-java | 4.3.87-150400.3.110.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-utils | 4.3.24-150400.3.35.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-web | 4.3.45-150400.3.60.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | subscription-matcher | 0.40-150400.3.28.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | supportutils-plugin-susemanager | 4.3.15-150400.3.33.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager | 4.3.42-150400.3.66.1 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-build-keys | 15.4.11-150400.3.35.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-docs_en | 4.3.16-150400.9.72.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-schema | 4.3.29-150400.3.51.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-sls | 4.3.47-150400.3.61.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-sync-data | 4.3.24-150400.3.44.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server 4.3 | release-notes-susemanager | 4.3.16-150400.3.140.1 | SUSE-SU-2025:02476-1 |
| SUSE Manager Proxy Module 4.3 | mgr-daemon | 4.3.12-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacecmd | 4.3.31-150400.3.48.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-backend | 4.3.33-150400.3.55.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-client-tools | 4.3.23-150400.3.39.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-proxy-installer | 4.3.12-150400.3.9.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-web | 4.3.45-150400.3.60.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | supportutils-plugin-susemanager-proxy +1 | 4.3.5-150400.3.9.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | susemanager-build-keys | 15.4.11-150400.3.35.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | susemanager-tftpsync-recv | 4.3.10-150400.3.12.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Proxy 4.3 | release-notes-susemanager-proxy | 4.3.16-150400.3.98.1 | SUSE-SU-2025:02476-1 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- SUSE Manager 4.3.15 - Code Execution EDB-52527 · webapps · Apr 30, 2026
GitHub 2 repositories
-
szachovy/CVE-2025-46811-challenge ★ 0 · Dec 5, 2025
-
b-L-x/CVE-2025-46811 ★ 0 · Aug 2, 2025
CVE-2025-46811
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- WID-SEC-2025-1688 SUSE Manager: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · May 25, 2026
- SUSE-SU-2025:02475-1 Security update 4.3.16 for Multi-Linux Manager Server SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02476-1 Security update 4.3.16 for Multi-Linux Manager Server SUSE / openSUSE Security Updates · Mar 23, 2026