Skip to content
OpenAdvisories
High · 8.5 CVE-2025-6182 EUVD-2025-25349GHSA-725m-6gv3-xj6r

Root Certificate Injection

Published Aug 20, 2025 · Updated Aug 20, 2025 · Assigned by StrongDM

Description

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Affected products

VendorProductAffectedFixed
StrongDM sdm ≤ 47.49.0 —

References