CVE-2025-64180: SSRF in Manager-io Manager

The SSRF vulnerability in Manager-io Manager poses a significant threat due to its ease of exploitation and potential impact. An attacker can leverage this flaw to access internal network services that are otherwise protected. In the Desktop edition, no authentication is required, making it particularly accessible. The Server edition requires standard authentication, but the impact remains severe as it allows access to internal resources. This could lead to data exfiltration, privilege escalation, and potentially complete compromise of the system. Attackers could also access cloud metadata, exposing sensitive credentials and configuration information. The lack of robust DNS validation contributes to the vulnerability's severity.

1. Reserved2025-10-28
2. Published2025-11-07
3. Modified2026-01-07
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-64180 is to upgrade Manager-io Manager to version 25.11.1.3086 or later. Before upgrading, it's crucial to back up your Manager-io database to facilitate a rollback if necessary. While a direct fix is available, consider implementing network segmentation to limit the blast radius of a potential exploit. WAF rules can be configured to block suspicious outbound requests, but this is not a substitute for patching. Monitor network traffic for unusual outbound connections originating from the Manager-io server. After upgrading, confirm the fix by attempting to access internal resources via Manager-io and verifying that access is denied.