7.3High
CVE-2025-4879Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Description
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
Weakness (CWE):
CWE-269
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| citrix | workspace | < 2402 | |
| Citrix | Workspace App for Windows | CR – < 2409, 2402 LTSR – < CU2 Hotfix 1, 2402 LTSR – < CU3 Hotfix 1 |
References and patches
CPE matches (NVD) (6)
cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:*< 2402cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*< 2409cpe:2.3:a:citrix:workspace:2402:-:*:*:ltsr:windows:*:*cpe:2.3:a:citrix:workspace:2402:cu1:*:*:ltsr:windows:*:*cpe:2.3:a:citrix:workspace:2402:cu2:*:*:ltsr:windows:*:*cpe:2.3:a:citrix:workspace:2402:cu3:*:*:ltsr:windows:*:*