high8.8
CVE-2026-9089
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations.
Impact
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Connectwise | Automate | before 2026.5 |