An authentication bypass vulnerability in N-able N-central, rated as High severity, allows attackers to escalate privileges and access sensitive internal APIs.

This vulnerability is classified as an authentication bypass (CWE-305) affecting internal APIs. While the flaw requires the attacker to have an existing low-level user session, it allows them to circumvent authorization checks and perform unauthorized actions within the administrative interface.

The ability to bypass authentication on internal APIs poses a significant risk to the integrity and availability of the N-central platform. Successful exploitation could allow an attacker to perform unauthorized administrative actions, potentially leading to full system compromise or the unauthorized management of managed endpoints. With a CVSS score of 7.7, this vulnerability represents a high-risk scenario that requires immediate attention to prevent lateral movement within the network.

Immediate Action: Administrators must upgrade N-able N-central to version 2026.3.1.13 or later immediately to resolve the authentication bypass.

Proactive Monitoring: Security teams should monitor system access logs for anomalous API requests originating from standard user accounts that deviate from expected behavioral patterns.

Compensating Controls: Ensure that the N-central management interface is not exposed to the public internet and restrict access to authorized network segments or VPNs to minimize the attack surface.

Public Exploit Available: Unknown

Given the potential for unauthorized administrative access, this vulnerability must be treated with high priority. Organizations should verify their current N-central version and apply the 2026.3.1.13 patch as soon as possible. Failure to remediate could allow an authenticated attacker to gain unauthorized control over critical infrastructure management functions.