Warning: A critical vulnerability in SUSE Multi Linux Manager allows attackers to execute any command as root. Patch Immediately!

SUSE disclosed CVE-2025-46811, a critical (CVSS 9.8) missing-authentication vulnerability in SUSE Multi Linux Manager that permits any remote unauthenticated actor connected to port 443 to access the /rhn/websocket/minion/remote-commands endpoint and execute arbitrary commands as root on clients, enabling full takeover; vendors and CCB recommend immediate patching, increased monitoring, and reviewing published IOCs.