Critical · 9.3 CVE-2025-3651 EUVD-2025-11474GHSA-cwh3-jw96-rmr6

Command Injection in iManage Work Desktop for Mac's Agent Service

Published Apr 17, 2025 · Updated Apr 17, 2025 · Assigned by iManage

Description

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier

allows attackers to execute arbitrary commands via unauthorized access to the Agent service.

This has been remediated in Work Desktop for Mac version 10.8.2.33.

Vendor	Product	Affected	Fixed
iManage	Work Desktop for Mac	< 10.8.2.33	10.8.2.33