Skip to content
OpenAdvisories

Vendor

StrongDM

5 known vulnerabilities.

Products

sdm-cli 3 sdm 1 StrongDM Desktop Application 1 StrongDM Desktop Client 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.0
    CVE-2025-6183

    Configd Injection

    The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message.

    StrongDM sdm-cli
  • High 8.5
    CVE-2025-6182

    Root Certificate Injection

    The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

    StrongDM sdm
  • High 8.5
    CVE-2025-6181

    The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit th…

    StrongDM sdm-cli
  • High 8.5
    CVE-2025-6180

    Authentication Hijack

    The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming valid authentication credentials through a race condition.

    StrongDM sdm-cli