Command Injection Vulnerability

N-able N-central fails to properly validate user input, allowing attackers to inject and execute arbitrary operating system commands on affected systems. This critical flaw can lead to complete system compromise.

An OS command injection vulnerability exists in N-central versions prior to 2025.3.1 due to improper input validation (CWE-20). An attacker can inject malicious commands through unsanitized user input, achieving remote code execution with system-level privileges. Exploitation requires network access to the affected N-central instance.