High · 8.8 CVE-2024-44107 EUVD-2024-40871GHSA-g5cq-mqgj-wgjv

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker…

Published Sep 10, 2024 · Updated Jun 12, 2025 · Assigned by ivanti

Vendor: ivanti Product: Workspace Control Category: Network devices

Description

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Workspace Control	—	10.19.0.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC