The UnifiedLogin service in Altium Enterprise Server contains an SSRF vulnerability that allows unauthenticated network attackers to induce the server to send HTTP requests to attacker-chosen destinations, including internal-only accessible services. One such internal service exposes server configuration and credential material without requiring authentication, relying solely on the request originating locally. Because the SSRF causes requests to originate from the server process, this local check is bypassed. Attackers can retrieve stored credentials and use them to obtain administrative sessions, resulting in full server compromise. This vulnerability does not affect Altium 365 cloud deployments since the vulnerable endpoint is disabled in that environment.

An unauthenticated attacker can fully compromise the Altium Enterprise Server by exploiting the SSRF vulnerability to retrieve sensitive credentials and gain administrative access. This leads to complete control over the server and all its services. The vulnerability is critical due to the lack of authentication required and the ability to access internal services that expose sensitive data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since Altium 365 cloud deployments disable the affected endpoint, they are not vulnerable. For on-premises deployments, monitor vendor communications for patches or official fixes and consider restricting network access to internal services as a temporary mitigation.