Skip to content
OpenAdvisories

Vendor

StrongDM

5 known vulnerabilities.

Products

sdm-cli 3 sdm 1 StrongDM Desktop Application 1 StrongDM Desktop Client 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2026-4387

    Unencrypted storage of authentication state in StrongDM Desktop Application state.kv file

    StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric key material, in cleartext in a per-user state file located at C:\Users\<username>\.sdm\sta…

    StrongDM StrongDM Desktop Client StrongDM Desktop Application