ConnectWise has disclosed a newly discovered security flaw in its ScreenConnect remote access software and provided interim mitigation steps while preparing a permanent patch for release later this week. The vulnerability affects both on-premises and cloud-hosted versions of the platform widely used by managed service providers and IT teams for remote support and system administration. The company confirmed the issue through internal security monitoring and is working to address it before potential exploitation.
The flaw could allow unauthorized access to systems connected through ScreenConnect if left unmitigated, posing a risk to organizations relying on the tool for client device management. ConnectWise advises users to restrict access to the ScreenConnect interface via firewall rules, disable public internet exposure of the service, and enforce multi-factor authentication where possible. These temporary controls aim to reduce attack surfaces until the official security update is deployed. The company emphasized that no active exploitation has been reported so far but urged prompt action to prevent compromise.
ScreenConnect is commonly integrated into the workflows of managed service providers who use it to remotely troubleshoot, update, and maintain customer endpoints without requiring physical access. Its ability to operate behind corporate firewalls or through cloud relays makes it a preferred tool for scalable remote support. However, this deep integration also means that any vulnerability in the software could serve as a gateway to multiple client networks if exploited. Security teams are encouraged to review access logs and ensure that only trusted IP addresses can reach the ScreenConnect web portal during the mitigation window.
Organizations using ScreenConnect should apply the temporary mitigations outlined by ConnectWise, including blocking direct internet access to the service ports and verifying that authentication mechanisms are hardened. IT administrators are also advised to check for any unusual session activity and ensure that logging is enabled to detect potential abuse attempts. ConnectWise has committed to releasing a formal patch within the coming days and will notify users through its standard security channels once the fix is available for download and installation.
Is there evidence that attackers are currently exploiting this ScreenConnect flaw? ConnectWise stated that no active exploitation has been detected or reported in the wild as of the announcement, but the risk remains if mitigations are not applied.
When will the permanent patch for the ScreenConnect vulnerability be available? The company confirmed that a patch is in development and will be released later this week, though an exact time was not specified.
Should users update ScreenConnect immediately once the patch is released? Yes, ConnectWise recommends applying the update as soon as it becomes available to close the security gap and restore full protection.