The announcement
San Diego, CA and Miami, FL, In a strong example of responsible disclosure and industry collaboration, Galactic Advisors, a cybersecurity firm specializing in managed service provider (MSP) defense, worked closely with Kaseya to identify and resolve two vulnerabilities in Kaseya's Network Detective tool.
The issues, now publicly listed in the MITRE CVE database, were discovered during routine research by Galactic Advisors' security team and promptly reported to Kaseya:
- CVE-2025-32353, Passwords in Cleartext: Network Detective stored sensitive credentials, including those for privileged and administrative accounts, in unprotected plaintext files on local machines. These files could have been accessible to an attacker with access to the system.
- CVE-2025-32874, Reversible Encryption: The tool used a predictable, static encryption method for storing credentials, allowing attackers to decrypt and expose sensitive data.
Kaseya acted swiftly upon notification, validating the findings and deploying security updates. Galactic Advisors and Kaseya coordinated throughout the remediation process to ensure user protections were in place prior to public disclosure.
Statements
At Galactic, our mission is to help MSPs avoid cyber liability. This means holding the tools they rely on to the highest security standards. We're proud of our team's diligence and of Kaseya's willingness to engage transparently and take immediate action.
Bruce McCully, CEO of Galactic Advisors
We appreciate Galactic Advisors for identifying these issues and supporting our remediation efforts. This kind of partnership improves the entire MSP ecosystem.
Jim Lippie, Chief Product Officer of Kaseya
Full CVE details
- https://www.cve.org/CVERecord?id=CVE-2025-32353
- https://www.cve.org/CVERecord?id=CVE-2025-32874
About Galactic Advisors: Galactic Advisors is a cybersecurity firm dedicated to reducing liability for MSPs through security research, proactive assessments, and incident response.
- https://galacticadvisors.com
About Kaseya: Kaseya is the leading global provider of AI-powered IT management and cybersecurity software.
- https://www.kaseya.com
Media contacts
- Galactic Advisors: press@galacticadvisors.com
- Kaseya: PR@kaseya.com
Media contact
Galactic Advisors Press
press@galacticadvisors.com
