CVE-2025-8663 Information disclosure in upKeeper Manager

What is CVE-2025-8663?

CVE-2025-8663 is a high-severity vulnerability in upKeeper Manager, published on 3 Sep 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12.

Weakness: CWE-532

Which versions are affected by CVE-2025-8663?

It affects 1 product.

Products include Upkeeper Upkeeper Manager.

How do I fix CVE-2025-8663?

No fix has been published for CVE-2025-8663 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-8663 being exploited?

There is no known exploitation of CVE-2025-8663 in the wild and no public exploit code.

Other vulnerabilities in upKeeper Manager

• CVE-2024-42462 Bypass multifactor authentication Critical 10.0
• CVE-2024-42466 Lack of resources and rate limiting - login Critical 9.5
• CVE-2024-42465 Lack of resources and rate limiting - two factor authentication Critical 9.0
• CVE-2024-42463 Leak of organizations messages High 8.6
• CVE-2024-42464 Leak of user information High 7.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fpqq-xvp5-hhmq.