San Diego, CA and Miami, FL — In a strong example of responsible disclosure and industry collaboration, Galactic Advisors, a cybersecurity firm specializing in managed service provider (MSP) defense, worked closely with Kaseya to identify and resolve two  vulnerabilities in Kaseya’s Network Detective tool.

The issues, now publicly listed in the MITRE CVE database, were discovered during routine research by Galactic Advisors’ security team and promptly reported to Kaseya:

  • CVE-2025-32353 – Passwords in Cleartext: Network Detective stored sensitive credentials, including those for privileged and administrative accounts, in unprotected plaintext files on local machines. These files could have been accessible to an attacker with access to the system.
  • CVE-2025-32874 – Reversible Encryption: The tool used a predictable, static encryption method for storing credentials, allowing attackers to decrypt and expose sensitive data.

Kaseya acted swiftly upon notification, validating the findings and deploying security updates. Galactic Advisors and Kaseya coordinated throughout the remediation process to ensure user protections were in place prior to public disclosure.

“At Galactic, our mission is to help MSPs avoid cyber liability. This means holding the tools they rely on to the highest security standards,” said Bruce McCully, CEO of Galactic Advisors. “We’re proud of our team’s diligence and of Kaseya’s willingness to engage transparently and take immediate action.”

“We appreciate Galactic Advisors for identifying these issues and supporting our remediation efforts,” said Jim Lippie, Chief Product Officer of Kaseya. “This kind of partnership improves the entire MSP ecosystem.”

The full CVE details are publicly available at:

About Galactic Advisors
Galactic Advisors is a cybersecurity firm dedicated to reducing liability for MSPs through security research, proactive assessments, and incident response. https://galacticadvisors.com

About Kaseya
Kaseya is the leading global provider of AI-powered IT management and cybersecurity software. https://www.kaseya.com

Media Contacts:
Galactic Advisors: press@galacticadvisors.com
Kaseya: PR@kaseya.com