Dear Kali GVM package maintainer,

I am experiencing a login failure with Greenbone Vulnerability Management (GVM) installed from the official Kali Rolling repository. I would appreciate your help in determining whether this is a packaging issue or an incompatibility between the installed GVM components.

System and package information

The system is configured to use only the kali-rolling repository:
https://http.kali.org/kali kali-rolling

The installed package versions are:
greenbone-security-assistant 28.3.0-0kali1
gsad 24.16.0-1
gvmd 26.24.0-1
libgvm22t64 22.41.0-1
ospd-openvas 22.10.6-1
gvm 25.04.3

apt update reports that all packages are up to date. The installed versions of gsad and greenbone-security-assistant are also the candidates available from the configured repository.

Problem description

The GVM web interface is accessible at:

https://127.0.0.1:9392

The login page loads, but attempting to log in fails with the message:

Could not connect to server

Firefox's developer console reports the following errors:
POST https://127.0.0.1:9392/login
HTTP/1.1 404 Not Found

GET https://127.0.0.1:9392/gmp?cmd=get_settings
HTTP/1.1 401 Unauthorized

It also reports that "/config.js" is served as text/html rather than JavaScript.

Direct HTTP checks confirm that "/" and "/login" return HTTP 200, and the main JavaScript asset is served successfully. However, "/config.js" returns an empty response with Content-Type: text/html; charset=utf-8.

Additional diagnostic results

• gsad, gvmd and ospd-openvas are running.
• gvmd reports that it is ready to accept GMP connections.
• A direct GMP request to the gvmd Unix socket using gvm-cli succeeds, and <get_users/> returns HTTP-like GMP status 200 with the admin user.
• No relevant gsad journal messages appear when the login attempt fails.
• dpkg -V greenbone-security-assistant gsad produces no output.
• The system previously ran out of disk space, but the root filesystem has since been expanded. It currently has approximately 72 GB available, and the login failure persists.
  The gsad service also has a local systemd override adding --no-redirect. The service starts successfully and listens on 127.0.0.1:9392.

Suspected cause

The installed frontend (greenbone-security-assistant 28.3.0) and server (gsad 24.16.0) may be incompatible, particularly given the HTTP 404 response to POST "/login". However, I have not confirmed this as the root cause.

Could you please investigate whether the versions currently provided by Kali Rolling are intended to work together, and whether a newer compatible gsad package or another packaging fix is required?

I have not attempted to downgrade or manually replace any packages, and I would prefer to preserve the existing GVM database and feed data.

I can provide additional diagnostic output if required.

Thank you for your time and for maintaining the Kali packages.

Best regards,

Ricardo.