This vulnerability (CWE-862) in SUSE Linux Manager containers and server modules involves missing authorization controls, enabling unauthenticated remote attackers to run any command as root on clients by connecting to the management server's port 443. Affected versions include suse/manager/5.0/x86_64/server:5.0.5.7.30.1 and several SLES15-SP4 Manager Server images before certain patch levels. The CVSS 3.1 vector indicates network attack vector, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. The vulnerability was published on 2025-07-30. No official patch or remediation details are provided in the input data.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary commands as root on any client managed by the SUSE Manager server, leading to full system compromise. This impacts confidentiality, integrity, and availability of affected systems. The CVSS score of 9.8 reflects critical severity. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor SUSE's official security advisories for updates. Until a fix is available, restricting network access to port 443 of the SUSE Manager server to trusted administrators only may reduce exposure.