---
id: CVE-2025-5494
title: >-
  ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege
  management issue in the agent setup.


  This issue affects Endpoint Central: through 11.4.2500.25, through
  11.4.2508.13.
summary: >-
  ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege
  management issue in the agent setup.


  This issue affects Endpoint Central: through 11.4.2500.25, through
  11.4.2508.13.
severity: low
cvss: 3.9
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L'
cwe:
  - CWE-269
vendor: zohocorp
product: manageengine_endpoint_central
affected:
  - manageengine_endpoint_central < 11.4.2500.26
  - 'manageengine_endpoint_central >= 11.4.2508.01, < 11.4.2508.14'
patched:
  - manageengine_endpoint_central 11.4.2508.14
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-5494'
references:
  - url: >-
      https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html
    label: 0fc0942c-577d-436f-ae8e-945763c79b02
tags:
  - nvd
epss: 0.00268
epssPercentile: 0.17492
ingestedAt: '2026-10-12T14:50:33.991Z'
---

## Overview

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.

This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

## Affected

- `manageengine_endpoint_central < 11.4.2500.26`
- `manageengine_endpoint_central >= 11.4.2508.01, < 11.4.2508.14`

## Remediation

Upgrade past the affected range:

- `manageengine_endpoint_central 11.4.2508.14`